terraform-conventions

Enforce security, style, and modularity standards on Terraform .tf files.

1|Updated Jun 24, 2026
One-click install
npx skills add https://github.com/eric-sabe/engsys --skill terraform-conventions-eric-sabe
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-conventions
Source: https://github.com/eric-sabe/engsys/tree/main/stacks/iac/terraform/skills/terraform-conventions
Command: npx skills add https://github.com/eric-sabe/engsys --skill terraform-conventions-eric-sabe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Unstandardized Terraform code leads to security vulnerabilities, inconsistent infrastructure deployments, high maintenance overhead, and compliance risks for teams managing cloud resources. This Skill eliminates those issues by providing clear, actionable conventions for all Terraform configuration files.

Core Features & Use Cases

  • Security Guardrails: Rules for secret management, least-privilege access, encryption, and vulnerability scanning to protect cloud infrastructure.
  • Code Quality Standards: Guidelines for modularity, maintainability, formatting, and documentation that reduce technical debt and speed up team collaboration.
  • Use Case: A DevOps team writing Terraform configurations for a multi-cloud environment can use this Skill to ensure all .tf files follow consistent style, avoid circular dependencies, and store secrets in the appropriate cloud secret manager instead of hard-coding them.

Quick Start

Ask the AI to review your Terraform .tf files for adherence to security, style, and modularity standards before committing changes to version control.

Frequently Asked Questions about terraform-conventions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce consistent Terraform code standards across my infrastructure-as-code files?

You can enforce consistent Terraform code standards by applying conventions for modularity, style guidelines, and documentation to all .tf files. This ensures maintainable infrastructure-as-code and reduces technical debt during team collaboration.

What security guardrails should I apply to Terraform configurations for cloud infrastructure?

Security guardrails for Terraform configurations include rules for secret management, least-privilege access, encryption, and vulnerability scanning. Applying these protects cloud infrastructure by minimizing security vulnerabilities and compliance risks.

Can I use these infrastructure-as-code conventions for multi-cloud environments?

Yes, these infrastructure-as-code conventions are designed for multi-cloud environments. They align with cross-cloud infrastructure best practices to ensure your .tf files avoid circular dependencies and maintain consistent deployments across providers.

How do I review Terraform .tf files for security and modularity before committing?

You can review Terraform .tf files by checking them against security, style, and modularity standards before committing changes to version control. This validation workflow ensures compliant code that stores secrets in the appropriate cloud manager instead of hard-coding them.

Why does unstandardized Terraform code lead to high maintenance overhead?

Unstandardized Terraform code leads to high maintenance overhead because it introduces security vulnerabilities, inconsistent deployments, and compliance risks. Establishing clear, actionable coding conventions for all configuration files eliminates these operational issues.

What is the best way to reduce technical debt in Terraform infrastructure-as-code?

The best way to reduce technical debt in Terraform infrastructure-as-code is to enforce guidelines for modularity, maintainability, formatting, and documentation. Applying these code quality standards speeds up collaboration and ensures compliant provisioning.