yba-terraform
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides templates and documentation for the official YugabyteDB Anywhere (YBA) Terraform provider. It incorporates security best practices, such as recommending the use of sensitive variables and encrypted backends for state management.
- [COMMAND_EXECUTION]: Provides standard, read-only cloud discovery CLI commands (AWS, GCP, Azure) to assist in identifying network resources. These are used to correctly populate Terraform manifests and do not perform destructive actions.
- [PROMPT_INJECTION]: Includes an indirect prompt injection surface where cloud CLI outputs are processed to generate code. This risk is managed through instructional constraints that prevent the fabrication of resource IDs and encourage the use of placeholders.
- Ingestion points: Network discovery commands in 'references/prereqs-and-network.md'.
- Boundary markers: Explicit instructions in 'SKILL.md' to avoid fabricating IDs.
- Capability inventory: Generation of HCL for cloud infrastructure management.
- Sanitization: Relies on instructional guidance and user review of generated manifests.
Audit Metadata