infra-iac-terraform
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting data from external cloud provider APIs, remote state backends, and external modules, which represents a potential attack surface for indirect prompt injection if those sources are compromised.
- Ingestion points: Data sources (e.g.,
aws_ami,aws_vpcinexamples/core.md),terraform_remote_state(inexamples/state.md), andhttpdata sources (inexamples/patterns.md). - Boundary markers: While the skill does not explicitly define delimiters for external data ingestion, it strongly encourages the use of
validationblocks for all user-supplied variables. - Capability inventory: The skill enables infrastructure management through
terraform applyand network health checks viahttpdata sources. - Sanitization: The skill features advanced validation techniques, including
preconditionandpostconditionblocks, to ensure data integrity.
Audit Metadata