terraform-module-library — agentic threat model

Not certain from the listing — relies on the host agent's underlying foundation model. The primary threat is prompt injection or adversarial reprogramming that forces the model to output insecure, backdoored, or misconfigured Terraform code.

The skill injects module scaffolding and organizational standards. If the source repository or vector store containing these templates is poisoned, the agent will systematically generate vulnerable infrastructure patterns across the organization.

The agent framework executes tool calls to write into local '.tf' files. Insecure tool integration or lack of strict path sanitization could allow path traversal, overwriting critical system files outside the intended workspace.

Not certain from the listing — the deployment environment of the host agent is unspecified. If the agent runs with high privileges or has direct access to cloud provider APIs to apply the generated Terraform, a compromise could lead to full cloud infrastructure takeover.

Not certain from the listing — there is no mention of built-in static analysis (e.g., tfsec, Checkov) or guardrails to validate the generated Terraform code before it is written to disk or executed.

Not certain from the listing — no identity, authorization, or compliance controls are described. Access control to the module library and audit logging of generated files are critical but unmentioned.

As an 'Agent Skill', this component is designed to be integrated into other agents. Vulnerabilities in this skill (such as malicious template injection) can propagate horizontally to any orchestrator agent utilizing it.