nuxt-terraform-skill

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a template generator for cloud infrastructure. It generates code based on static templates and follows industry standard practices for the technologies involved (Nuxt 4, AWS Terraform, and AppSync).
  • [EXTERNAL_DOWNLOADS]: The skill populates package.json with scripts that utilize bunx terraform-scaffold. This command invokes a package runner to download and execute the terraform-scaffold tool. Given the skill's purpose as a companion to this tool, this behavior is expected and transparent.
  • [CREDENTIALS_UNSAFE]: No hardcoded secrets or credentials were found in the codebase or templates. The skill uses secure practices by utilizing environment variable placeholders and Terraform's sensitive attribute for outputs like API keys or access secrets.
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to run terraform fmt and terraform validate commands. These are standard maintenance operations for Terraform configurations and are restricted to the local environment files generated by the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 01:27 AM