High-risk tools in Terraform Best Practices

High severity Terraform Best Practices MCP Server 5 of 18 tools

5 of the 18 tools in Terraform Best Practices are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

run_checkov Execute

Run checkov over a Terraform directory.
run_infracost Execute

Run infracost breakdown for a Terraform directory.
run_kics Execute

Run kics IaC scanning against Terraform code.
run_tflint Execute

Run tflint against a Terraform project directory.
run_trivy Execute

Run trivy config scanning against Terraform code.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Terraform Best Practices

Tools at high risk

Attacks that target this class

More on Terraform Best Practices

Enforce policy on every Terraform Best Practices tool call.