terraform-skill
Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops — diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.
Best for DevOps teams managing infra…Works with GitHub
⌘source
- author
@antonbabenko- language
- unknown
★1.6kstars
131forks
Apr 22, 2026
✦overview.md
Key Features
- ·Diagnoses Terraform/OpenTofu failure modes
- ·Version-aware guards for infrastructure changes
- ·Addresses identity churn, secret exposure, and blast radius
- ·Provides remediation with explicit tradeoffs
- ·Includes validation plans with exact commands
- ·Mandates rollback notes for destructive changes
Use Cases
- →Reviewing Terraform modules for security risks before deployment
- →Debugging CI pipeline failures in infrastructure-as-code workflows
- →Assessing blast radius and compliance gaps in production changes
- →Planning rollback strategies for state-mutating operations
Best for
- ✓DevOps teams managing infrastructure
- ✓Security reviews of IaC
- ✓CI/CD pipeline integration
Not ideal for
- !One-off script execution
- !Non-Terraform infrastructure tools
FAQs
name
terraform-skill
description
Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops — diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.
license
Apache-2.0
metadata:{"author":"Anton Babenko","version":"1.7.0"}
Terraform Skill for Claude
Diagnose-first guidance for Terraform and OpenTofu. Core file is a workflow; depth lives in references loaded on demand.
Response Contract
Every Terraform/OpenTofu response must include:
- Assumptions & version floor — runtime (
terraformortofu), exact version, providers, state backend, execution path (local/CI/Cloud/Atlantis), environment criticality. State assumptions explicitly if the user did not provide them. - Risk category addressed — one or more of: identity churn, secret exposure, blast radius, CI drift, compliance gaps, state corruption, provider upgrade risk, testing blind spots.
- Chosen remediation & tradeoffs — what was chosen, what was traded off, why.
- Validation plan — exact commands (
fmt -check,validate,plan -out, policy check) tailored to runtime and risk tier. - Rollback notes — for any destructive or state-mutating change: how to undo, what evidence to keep.
Never recommend direct production apply without a reviewed plan artifact and approval.
Workflow
- Capture execution context — runtime+version, provider(s), backend, execution path, environment criticality.
$install
1-click copynpx skills add antonbabenko/terraform-skill --skill terraform-skillSafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
3/ 5
goodMostly clear, but there are still a few confusing or poorly structured parts.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
3/ 5
mediumPartially actionable with several concrete steps, but still missing important details.