infra

Validate and manage Terraform, CloudFormation, Pulumi, and CDK deployments.

26|8|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/arbazkhan971/godmode --skill infra-arbazkhan971
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: infra
Source: https://github.com/arbazkhan971/godmode/tree/main/skills/infra
Command: npx skills add https://github.com/arbazkhan971/godmode --skill infra-arbazkhan971

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a rigorous, production-ready workflow to detect, validate, secure, cost-estimate, and safely apply infrastructure-as-code changes so teams avoid drift, unexpected destructive changes, policy violations, and cost overruns.

Core Features & Use Cases

  • IaC discovery & validation: Detects Terraform, CloudFormation, Pulumi, and CDK projects and runs format, init, validate, and plan checks before any apply.
  • Policy & security enforcement: Runs policy checks and enforces hard rules such as no public storage, no wildcard IAM actions, required tagging, and audit logging before deployment.
  • Cost estimation & drift detection: Integrates cost estimation and drift checks to flag budget or configuration divergence and gates changes that exceed thresholds.
  • Testing & safe deploys: Supports unit and integration IaC tests, staged deployments, and safety checks for destructive operations.

Quick Start

Use the infra skill to run a full plan, policy check, cost estimate, and drift scan for the current IaC project before applying changes.

Frequently Asked Questions about infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate Terraform plans before applying infrastructure changes?

To validate Terraform plans before applying infrastructure changes, you can run format, init, validate, and plan checks. This workflow ensures safe provisioning by reviewing changes for destructive operations and policy violations prior to deployment.

How do I enforce security policies like no wildcard IAM in infrastructure-as-code?

To enforce security policies like no wildcard IAM in infrastructure-as-code, this workflow runs policy scans before deployment. It applies guardrails including blocking public storage buckets, wildcard IAM actions, and missing required tags to secure provisioning.

Does this infrastructure validation workflow support Pulumi and CloudFormation projects?

Yes, this infrastructure validation workflow supports Pulumi and CloudFormation projects. It automatically detects multiple infrastructure-as-code frameworks alongside Terraform and CDK to run consistent planning, policy enforcement, and cost estimation checks.

What is the best way to detect drift in infrastructure-as-code deployments?

The best way to detect drift in infrastructure-as-code deployments is to run remote state checks and drift reporting scans. This process flags configuration divergence from your live environment, ensuring your applied infrastructure matches your code.

How do I estimate cloud costs for Terraform and CDK changes before deploying?

To estimate cloud costs for Terraform and CDK changes before deploying, you can integrate Infracost estimation into your workflow. This calculates projected expenses and gates changes that exceed your defined budget thresholds.

Can I run integration tests for infrastructure-as-code before a staged apply?

Yes, you can run integration tests for infrastructure-as-code before a staged apply. The workflow supports unit and integration IaC tests alongside safety checks for destructive operations to guarantee safe, staged deployments.