infra_change_review

Parse infrastructure plans and diffs to identify and categorize risk areas.

1|Updated Oct 19, 2025
One-click install
npx skills add https://github.com/acartine/osterman --skill infra-change-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: infra_change_review
Source: https://github.com/acartine/osterman/tree/main/skills/infra_change_review
Command: npx skills add https://github.com/acartine/osterman --skill infra-change-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates and standardizes reviews of infrastructure changes to reduce risk and ensure compliance before deployment.

Core Features & Use Cases

  • Parse plan/diff to identify changes across IAM, networking, and costs.
  • Flag risky changes, blast radius exposure, and non-compliant configurations.
  • Provide mitigations and phased rollout recommendations.
  • Supports governance workflows and approval gates.

Quick Start

Run the infra_change_review skill on your pull request diff to generate a safety-focused review report.

Frequently Asked Questions about infra_change_review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review infrastructure changes for IAM and networking risks before deployment?

To review infrastructure changes, you can parse a plan or diff to identify and categorize modifications across IAM, networking, and costs. This process surfaces explicit risk flags and blast radius exposure to ensure safe pre-deployment governance.

Can I automate infrastructure diff analysis in CI/CD pipelines for compliance checks?

Yes, you can automate infrastructure diff analysis in CI/CD pipelines to satisfy governance requirements. Running checklist-driven reviews on pull requests generates safety reports with recommended mitigations and phased rollout strategies before merge.

What is the best way to identify blast radius exposure from an infrastructure plan?

The best way to identify blast radius exposure is to apply checklist-driven analysis directly to the infrastructure plan or diff. This categorizes changes and explicitly flags risk areas, enabling governance reviews and approval gates before rollout.

Does this infrastructure review approach provide recommended mitigations for flagged risks?

Yes, this infrastructure review approach provides recommended mitigations for flagged risks. It analyzes plan diffs to surface non-compliant configurations and outputs phased rollout recommendations to satisfy non-destructive analysis requirements.

How do I check infrastructure diffs for cost changes and non-compliant configurations?

You can check infrastructure diffs for cost changes by parsing the plan to categorize modifications. This flags risky changes, blast radius exposure, and non-compliant configurations, enabling governance workflows and approval gates before rollout.