iac-review

Review Terraform, Pulumi, and CloudFormation IaC for state, modules, plans, drift, security, and cost.

Updated May 11, 2026
One-click install
npx skills add https://github.com/resultakak/argos --skill iac-review-resultakak
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: iac-review
Source: https://github.com/resultakak/argos/tree/main/skills/iac-review
Command: npx skills add https://github.com/resultakak/argos --skill iac-review-resultakak

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

IaC Review provides a structured, repeatable analysis of infrastructure-as-code across Terraform, Pulumi, and CloudFormation, ensuring proper state handling, module contracts, plan validation, drift detection, security checks, and cost visibility.

Core Features & Use Cases

  • State management review: validates remote backends, locking, encryption, versioning, and per-env isolation.
  • Module contract and plan review: ensures explicit inputs/outputs, provider versions, and stable module sources; enforces plan-based validation and drift checks.
  • Security and cost auditing: runs tfsec/checkov/OPA assessments and reports Infracost delta to guide cost optimization.
  • Use cases include PR reviews for IaC changes, state migrations, multi-env refactors, and incident triage across cloud resources.

Quick Start

Run an IaC review against your Terraform, Pulumi, or CloudFormation project to generate a structured assessment.

Frequently Asked Questions about iac-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Terraform code for state management and module contracts?

To review Terraform code, this Skill validates remote backends, locking, encryption, versioning, and per-environment isolation. It also enforces explicit module inputs, outputs, and provider versions to ensure stable, secure infrastructure deployments.

Can I run a security scan and cost diff on CloudFormation or Pulumi projects?

Yes, you can run security scans and cost diffs on CloudFormation or Pulumi projects. The Skill executes tfsec, checkov, and OPA assessments while reporting Infracost deltas to guide infrastructure cost optimization and security posture improvements.

What is the best way to detect infrastructure drift during an IaC PR review?

The best way to detect infrastructure drift during an IaC PR review is by enforcing plan-based validation and drift checks. This Skill provides a structured workflow that compares expected state against actual cloud resources to identify configuration deviations.

Does this IaC review workflow support multi-environment refactors and state migrations?

Yes, this IaC review workflow supports multi-environment refactors and state migrations. It provides clear guardrails and severity scoring to ensure reproducible results when managing complex infrastructure changes across different deployment environments.