What problem does it solve? Infrastructure as Code reviews are inconsistent and error-prone: reviewers miss unpinned provider versions, local state without locking, hardcoded secrets, and silent configuration drift. This Skill provides a structured checklist and output template so every IaC review covers structure, remote state, security, change safety, and drift detection. ## Core Features & Use Cases - Structured review checklist: Covers module composability, remote state with locking, least-privilege IAM, encryption, pinned provider and module versions, and prevent_destroy on stateful resources. - Common findings catalog: Flags known anti-patterns such as count on reorderable lists, excessive depends_on, and environment branching via terraform.workspace string interpolation. - Standardized output template: Produces a findings table with area, severity, and recommendation, plus a blocking-findings count and an approve/request-changes verdict. - Use Case: A teammate opens a pull request adding a Terraform module for a storage account. Ask for an IaC review and receive a severity-ranked findings table catching public network access and an unpinned provider version before merge. ## Quick Start Review this Terraform module for security issues, state configuration, and drift risks, then give me a severity-ranked findings table with a verdict.
