auditing-iac-module-and-provider-supply-chain SKILL.md skillA
auditing-iac-module-and-provider-supply-chain from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/auditing-iac-module-and-provider-supply-chain@git:20260827.b5f41a4Pins git:20260827.b5f41a4 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/auditing-iac-module-and-provider-supply-chain/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260827.b5f41a4, committed Aug 27, 2026
- Size
- 9,213 bytes
- Repository stars
- 26
- License
- MIT
Audit the supply chain of infrastructure-as-code modules and providers for trust that runs at plan or apply time: a module sourced from an unpinned or attacker-influenceable location, a provider or plugin pulled from a registry without integrity pinning, a module that executes local commands or fetches remote content during planning, and a lockfile that is missing, ignored, or not enforced in CI. Covers Terraform and similar declarative tools where a module or provider runs with the…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Auditing IaC module and provider supply chain: when planning runs someone else's code Infrastructure-as-code feels declarative, but modules and providers are code, and they run with the credentials of whoever plans or applies them, which in a pipeline is usually a highly privileged identity. That makes the module and provider supply chain a direct path to those credentials. A module sourced from an unpinned reference can change under you between runs; a provider or plugin pulled without integrity verification can be swapped at the registry; a module that shells out or fetches remote content during planning executes on the runner before anyone reviews an apply; and a lockfile that is absent or not enforced lets the resolved versions drift. The declarative surface hides that a plan is an execution. You audit this by finding where module and provider code enters and whether its source and integrity are pinned. ## When to use - Infrastructure is built from third-party or shared modules and from providers pulled at init time. - Module sources or provider versions are unpinned, or a dependency lockfile is missing or unenforced. …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/auditing-iac-module-and-provider-supply-chain@sha256:9358d824ff5b8d9eThe line at the top of this page pins the label git:20260827.b5f41a4, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_utpqqlom44e2phkk)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 27, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9213 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_utpqqlom44e2phkk GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/auditing-iac-module-and-provider-supply-chain GET https://markdownregistry.com/api/v1/blob/9358d824ff5b8d9e17561896367fc757c9ed93d8569e3d005be815fc4a4ea0a3
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.