infra-as-code
Enables defining and managing cloud infrastructure using code with Terraform, CloudFormation, or Pulumi for efficient deployments.
Install this skill
Security score
The infra-as-code skill was audited on Feb 9, 2026 and we found 12 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 134 | ```hcl |
Template literal with variable interpolation in command context
| 215 | ```hcl |
Template literal with variable interpolation in command context
| 247 | ```hcl |
Template literal with variable interpolation in command context
| 288 | ```hcl |
Template literal with variable interpolation in command context
| 328 | ```hcl |
Template literal with variable interpolation in command context
| 418 | ```bash |
Template literal with variable interpolation in command context
| 429 | ```yaml |
Template literal with variable interpolation in command context
| 563 | tags: { Name: `myapp-${environment}-vpc` }, |
Template literal with variable interpolation in command context
| 571 | tags: { Name: `myapp-${environment}-public` }, |
Template literal with variable interpolation in command context
| 576 | bucket: `myapp-${environment}-data`, |
External URL reference
| 538 | # Install: https://www.pulumi.com/docs/install/ |
External URL reference
| 699 | # Install: https://www.infracost.io/docs/ |