terraform-engineer

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Terraform engineer skill is coherently scoped for its stated purpose: designing modular Terraform infrastructure with secure remote state management, multi-cloud provider configuration, and validation/testing workflows. It does not exhibit download-or-execute chains, unverifiable binaries, or unnecessary credential exposure. The security posture is appropriate for IaC tooling, with the main risk area being proper configuration of remote state security (encryption, access control, and locking) which is consistent with the described constraints. Overall, the footprint is benign-to-moderately suspicious only in the area of backend security configuration; no evidence of credential harvesting or outbound data exfiltration is present.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 07:29 PM
Package URL
pkg:socket/skills-sh/jeffallan%2Fclaude-skills%2Fterraform-engineer%2F@db0cdcd3c31985d0fc209d40178175a0e3f2d108