terraform-stacks
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFE
Full Analysis
- HCP Terraform API Interaction: The skill includes reference material and scripts for interacting with the official
app.terraform.ioAPI usingcurl. This is a standard and expected method for monitoring infrastructure deployments in automated or non-interactive environments. - Credential Management Considerations: Instructions are provided for extracting authentication tokens from the local
~/.terraform.d/credentials.tfrc.jsonfile. This pattern is used to enable programmatic access to the user's own HCP Terraform account for legitimate management tasks, following the vendor's recommended authentication practices. - Dynamic Resource Sourcing: The skill describes the process of downloading Terraform providers and modules from public and private registries, as well as version control systems like Git. These operations are fundamental to the Terraform workflow and target well-known repositories or user-defined infrastructure sources.
- Infrastructure Configuration Surface: By design, the skill assists in the creation and execution of HCL-based infrastructure configurations. This provides a platform for defining complex infrastructure changes, which should be managed according to standard organizational security policies for Infrastructure as Code (IaC).
Audit Metadata