infrastructure-as-code
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily documentation and HCL templates focused on promoting security best practices for cloud infrastructure management.
- [SAFE]: Explicitly instructs users to avoid hardcoding credentials and instead use secure secret management services like HashiCorp Vault or AWS Systems Manager (SSM) Parameter Store.
- [SAFE]: Recommends the use of remote backend state management with S3 encryption and DynamoDB locking to ensure state file integrity and security.
- [SAFE]: Includes guidance on implementing the principle of least privilege (PoLP) for IAM roles used in automation workflows.
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or unauthorized command execution were detected.
Audit Metadata