terraform-aws

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [GENERAL] (SAFE): The skill follows industry standard practices for Infrastructure as Code (IaC) and provides clear security guidance for AWS deployments.
  • [CREDENTIALS_UNSAFE] (SAFE): The documentation explicitly warns against hardcoding secrets and provides examples of using sensitive variables and IAM roles rather than static access keys.
  • [COMMAND_EXECUTION] (SAFE): The tf-init.sh script is a utility for bootstrapping a local Terraform project. While it performs file system operations and executes terraform init, these are legitimate and expected actions for the skill's primary purpose.
  • [EXTERNAL_DOWNLOADS] (SAFE): References official Hashicorp providers (a trusted source) and widely-used community Terraform modules. No suspicious or risky external sources are used.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:37 PM