skills.rest
Cloudgeni-ai
Cloudgeni-aiOFFICIAL
Explore all skills by this author →
GitHub

checkov

Detect security and compliance violations in Terraform with Checkov scans.

47|5|Updated Apr 16, 2026
Search Tags:#static analysis#remediation#compliance#terraform#checkov#iac security#policy scanning
One-click install
npx skills add https://github.com/Cloudgeni-ai/opengeni --skill checkov-cloudgeni-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: checkov
Source: https://github.com/Cloudgeni-ai/opengeni/tree/main/packages/runtime/src/bundled_hashicorp_terraform_skills/checkov
Command: npx skills add https://github.com/Cloudgeni-ai/opengeni --skill checkov-cloudgeni-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Checkov helps you find security, compliance, and best-practice issues in Terraform and infrastructure-as-code before they reach production, so you can remediate quickly and consistently.

Core Features & Use Cases

  • Terraform & IaC Policy Scanning: Detects misconfigurations and policy violations in Terraform code and related infrastructure-as-code.
  • Actionable Findings Summaries: Identifies failed checks with check IDs, affected files/resources, and the underlying reasons for violations.
  • Safe Remediation Workflow: Supports targeted edits to selected findings, keeps Terraform style intact, and validates changes with formatting, init (no remote backend), and validation.

Quick Start

Run checkov against your Terraform repo mounted under /workspace/repos and summarize the failed checks so you can decide which fixes to apply next.

Frequently Asked Questions about checkov

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform for security and compliance policy violations?▼

Run Checkov static analysis against your Terraform repository to detect misconfigurations and policy violations, generating compact and JSON outputs that summarize failed checks with IDs, affected files, and reasons.

What is the best way to automate infrastructure-as-code security scanning before production?▼

Infrastructure-as-code security scanning identifies best-practice issues in Terraform code prior to deployment. It runs static analysis checks and provides actionable findings summaries for quick, consistent remediation.

How do I safely remediate Terraform security issues found during a static analysis scan?▼

Apply targeted edits to the selected findings, maintain Terraform style using terraform fmt, validate changes with terraform init -backend=false and terraform validate, then run a follow-up Checkov scan.

Does Checkov work with Terraform modules to detect infrastructure-as-code misconfigurations?▼

Yes, Checkov scans IaC repositories containing Terraform modules and resources. It runs using the terraform framework to detect policy gaps and outputs both compact and JSON formats for review.

Can I validate Terraform changes locally without a remote backend after fixing security findings?▼

Yes, the safe remediation workflow validates changes locally by running terraform init with the -backend=false flag, followed by terraform validate to ensure syntax and configuration correctness.

Why do I need JSON output when running static analysis on Terraform code?▼

JSON output provides an easily parsable format for summarizing failed Checkov checks. It complements compact output by enabling automated processing and clearer review of security and compliance violations.

Related Skills

Explore More Software Engineering Skills→
rpothinrpothin

terraform-security

Guide secure development, scanning, and deployment of Power Platform Terraform modules.

Community
Advanced
LusciiLuscii

terraform-syntax

Guide Terraform HCL syntax for writing, reviewing, and validating configurations.

Official
Basic
mysticaltechmysticaltech
3.9k

test-changes

Run terraform fmt, validate, and plan against a test environment.

Community
Intermediate
zzw4257zzw4257

Checkov

Scan infrastructure-as-code files for security vulnerabilities and compliance deviations.

Community
Intermediate