terraform-test
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides examples of integrating with official and well-known services. Specifically, it references the official
hashicorp/setup-terraformGitHub Action and thehashicorp/terraformDocker image for CI/CD pipelines. - [EXTERNAL_DOWNLOADS]: The documentation mentions using modules from the official Terraform Registry (e.g.,
terraform-aws-modules/vpc/aws), which is a well-known and trusted source for infrastructure-as-code components. - [NO_CODE]: The repository consists entirely of documentation (Markdown files) and HCL (Terraform) examples meant for guidance. It does not include executable scripts, binaries, or automated code execution routines within the skill itself.
- [PROMPT_INJECTION]: The
CLAUDE.mdandSKILL.mdfiles contain instructions intended for the AI assistant. These instructions are consistent with the skill's purpose—providing technical guidance on Terraform testing—and do not contain patterns attempting to bypass safety filters or override core system prompts. - [CREDENTIALS_UNSAFE]: While the skill includes examples for GitHub Actions and GitLab CI, it correctly uses placeholders and environment variable references (e.g.,
${{ secrets.AWS_ACCESS_KEY_ID }}) rather than hardcoding sensitive credentials.
Audit Metadata