Security audit
Terraform Security Audit
Security checks across malware telemetry and agentic risk
Overview
This is a coherent Terraform security-auditing skill that runs expected local scanners, with the main caution being that Terraform plans, state, and reports can contain sensitive infrastructure data.
Install only if you intend to audit Terraform projects you are authorized to review. Treat Terraform state, plan JSON, scanner output, and SARIF/JSON reports as sensitive, and use least-privilege API keys for optional integrations.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.