terraform-cli-setup

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose and most capabilities are coherent for a Terraform setup skill, and the primary install sources are official HashiCorp channels. However, the skill auto-installs software and rewrites global Terraform config without user confirmation, skips checksum/signature verification on manual binary installs, and may redirect provider downloads to third-party mirrors. These are medium-risk trust and integrity issues rather than confirmed malware.

Confidence: 88%Severity: 53%
Audit Metadata
Analyzed At
Oct 9, 2026, 03:27 AM
Package URL
pkg:socket/skills-sh/agentscope-ai%2Fqwenpaw%2Fterraform-cli-setup%2F@a6050a2498ac3f6a0e73ee10618d84f7e8b0df088b94e0fc17c4cf9f5ae6a9e6