terraform-secrets-management
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security guide for Terraform, teaching users how to replace hardcoded secrets with Google Secret Manager integration.- [SAFE]: It contains educational examples of insecure code (e.g., hardcoded "SuperSecret123") clearly marked with "❌ NEVER DO THIS" to warn against poor security practices.- [SAFE]: The code snippets utilize Terraform's "sensitive" attribute for variables and outputs, which is a standard security feature to prevent data exposure in logs and CLI output.- [SAFE]: The provided rotation script ("rotate_secrets.sh") uses standard utilities like "openssl" and "gcloud" to manage secrets within the user's own GCP environment.
Audit Metadata