audit

Audit Terragrunt components and Terraform modules for repository standards and security compliance.

1|Updated Mar 29, 2026
One-click install
npx skills add https://github.com/DiegoBulhoes/claude --skill audit-diegobulhoes
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/DiegoBulhoes/claude/tree/main/skills/workflow/audit
Command: npx skills add https://github.com/DiegoBulhoes/claude --skill audit-diegobulhoes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Ensures Terragrunt components and Terraform modules adhere to repository standards, reducing drift and enabling auditable compliance across the codebase.

Core Features & Use Cases

  • Inventory and catalog components and modules across infrastructure-live and related directories.
  • Validate naming, structure, tagging, and module references against a unified conventions checklist.
  • Produce a structured, actionable compliance report suitable for PR reviews and deployment governance.

Quick Start

Run the audit across infrastructure-live components and modules to generate a compliance report.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Terraform modules for repository standards and security compliance?

Auditing Terraform modules for repository standards involves inventorying components, validating naming and structure, and running security scans. This process generates a formal compliance report suitable for PR reviews and deployment governance.

What is the best way to ensure Terragrunt components conform to infrastructure-live conventions?

Ensuring Terragrunt components conform to infrastructure-live conventions requires checking module references, structure, and tagging against a unified checklist. This produces an actionable compliance report that reduces configuration drift across the codebase.

Can I generate a formal compliance report for IaC PR reviews automatically?

Generating a formal compliance report for IaC PR reviews is achieved by performing inventorying, component and module checks, and security scanning. This outputs a structured governance document for deployment validation.

How does IaC security scanning work for Terragrunt and Terraform configurations?

IaC security scanning for Terragrunt and Terraform works by cataloging components across infrastructure-live directories and validating them against repository standards. This identifies compliance violations and produces a structured report for remediation.

Does this compliance audit work with infrastructure-live directories and Terraform modules?

This compliance audit targets Terragrunt components and Terraform modules specifically within infrastructure-live and related directories. It inventories and validates these configurations to ensure infrastructure code adheres to unified repository standards.

When do I need to run an IaC conformity audit on my infrastructure codebase?

Running an IaC conformity audit is necessary when you need to enforce repository standards, reduce drift, and enable auditable compliance before deployments. It validates module references and security configurations to generate a formal PR report.