iac-reviewer

Identify safety and correctness issues in infrastructure-as-code changes.

Updated Dec 28, 2025
One-click install
npx skills add https://github.com/oalansilva/crypto --skill iac-reviewer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: iac-reviewer
Source: https://github.com/oalansilva/crypto/tree/main/.codex/skills/infra/iac-reviewer
Command: npx skills add https://github.com/oalansilva/crypto --skill iac-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Review infrastructure-as-code changes for safety and correctness, flagging drift and policy violations early in the development lifecycle.

Core Features & Use Cases

  • Automated drift detection and risk assessment for IaC changes.
  • Validation of security groups, IAM permissions, and networking rules.
  • Guidance on change sequencing and state handling to prevent deploy-time issues.

Quick Start

Run the IaC diff against your latest changes and review the automatically generated findings for safety and correctness.

Frequently Asked Questions about iac-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect infrastructure drift in my IaC changes?

To detect infrastructure drift in IaC changes, run an IaC diff against your latest modifications. The review automatically identifies drift, assesses risks, and reports safety and correctness issues early in the development lifecycle.

What is the best way to validate IAM permissions and security groups in IaC?

Validating IAM permissions and security groups in IaC involves automated policy checks. The review process validates networking rules and IAM configurations to flag policy violations and ensure safe deployments across environments.

How do I handle state and change sequencing to prevent IaC deployment issues?

Handling state and change sequencing to prevent IaC deployment issues requires guidance on proper ordering. The review process provides recommendations on change sequencing and state handling to avoid deploy-time conflicts.

Does IaC code review work across multiple cloud accounts and environments?

Yes, IaC code review works across multiple cloud accounts and environments. It applies drift detection and policy checks across environments and accounts to ensure safe deployments and satisfy infrastructure compliance requirements.

When do I need an automated IaC review for cloud infrastructure compliance?

You need an automated IaC review for cloud infrastructure compliance when you want to flag policy violations early. It ensures safety and correctness by validating security groups, IAM permissions, and networking rules before deployment.