@tank/terraform-mastery

Harden Terraform and OpenTofu infrastructure code with HCL, modules, and CI/CD.

1|1|Updated Feb 20, 2026
One-click install
npx skills add https://github.com/tankpkg/packages --skill tank-terraform-mastery
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: @tank/terraform-mastery
Source: https://github.com/tankpkg/packages/tree/main/skills/terraform-mastery
Command: npx skills add https://github.com/tankpkg/packages --skill tank-terraform-mastery

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams design, review, and harden Terraform and OpenTofu configurations so infrastructure changes are safer, more repeatable, and easier to operate at scale.

Core Features & Use Cases

  • HCL and Language Guidance: Write clearer configurations with the right expressions, meta-arguments, dynamic blocks, and validation patterns.
  • Module, State, and Provider Architecture: Build reusable modules, manage remote state safely, pin providers, and structure environments to reduce blast radius.
  • Testing, CI/CD, and Security: Add native tests, Terratest, PR plans, apply gates, drift detection, secrets handling, and policy checks for production workflows.
  • Use Case: A platform engineer can use this Skill to review a multi-environment Terraform repo, identify unsafe state or provider practices, and propose a deploy pipeline that is secure, testable, and easy to maintain.

Quick Start

Ask this Skill to audit your Terraform project and provide production-ready improvements for structure, modules, state, testing, CI/CD, and security.

Frequently Asked Questions about @tank/terraform-mastery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure a multi-environment Terraform project to reduce blast radius?

Structure multi-environment Terraform projects by building reusable modules, managing remote state safely, and pinning providers to reduce blast radius. This approach ensures infrastructure changes are safer, more repeatable, and easier to operate at scale.

What is the best way to add CI/CD and testing to OpenTofu workflows?

Add CI/CD and testing to OpenTofu workflows by implementing native tests, Terratest, PR plans, and apply gates. These mechanisms enforce validation rules and policy checks for secure, testable production deployments.

How does drift detection work in infrastructure as code pipelines?

Drift detection in infrastructure as code pipelines works by continuously comparing real-world cloud state against your Terraform configuration. Identifying these discrepancies helps teams maintain configuration integrity and operate safely at scale.

Does Terragrunt work with remote state and provider pinning patterns?

Terragrunt works with remote state and provider pinning patterns to structure environments safely. Applying these patterns reduces blast radius and ensures infrastructure changes remain repeatable across multi-environment repositories.

Why do I need validation rules and policy enforcement in HCL configurations?

You need validation rules and policy enforcement in HCL configurations to harden infrastructure code before deployment. Enforcing these checks prevents unsafe state practices and ensures security review standards are met.

What are the limitations of managing Terraform state without import and moved blocks?

Managing Terraform state without import and moved blocks limits your ability to safely refactor resources without causing destructive changes. Utilizing these blocks properly is required to maintain production-grade rigor and prevent state corruption.