terraform-aws-annotated-reference

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The validation script lib/validate_template.sh utilizes standard Unix utilities such as grep, jq, sed, and wc to analyze local Terraform files. It does not use eval or perform dynamic command execution based on untrusted inputs.
  • [CREDENTIALS_UNSAFE] (SAFE): The HCL example in references/nested_block_example.md includes AWS ARNs and resource IDs. However, these are clearly identified as dummy values (e.g., AWS account ID 123456789012 and generic subnet/security group IDs) used for illustrative purposes in documentation.
  • [DATA_EXFILTRATION] (SAFE): No network operations, exfiltration patterns, or attempts to access sensitive system files (like SSH keys or AWS credentials) were identified in the provided files.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:09 PM