Audit Infrastructure as Code repositories for risks before changes.
npx skills add https://github.com/Arafly/sre-playbooks --skill terraform-iac-review
Please help me install this Agent Skill. Skill: terraform-iac-review Source: https://github.com/Arafly/sre-playbooks/tree/main/terraform-iac-review Command: npx skills add https://github.com/Arafly/sre-playbooks --skill terraform-iac-review
This Skill helps you understand and safely modify unfamiliar Infrastructure as Code before a risky apply breaks production, weakens security, or destroys managed resources.
Ask the skill to summarize the Terraform estate, state model, module structure, and the highest-risk changes you should review before applying anything.
High-intent search queries and answers about installing and using this skill.
To review Terraform code safely, audit the infrastructure to surface high-impact resources like IAM, networking, databases, DNS, and production compute before applying any risky changes.
Infrastructure blast radius in IaC identifies the scope of high-impact resources affected by a change. You check it by mapping providers, modules, and state to assess potential damage before an apply.
Detect state drift and hardcoded secrets in a Terraform repository by running safety checks that look for unclear ownership, missing encryption, open access, unsafe defaults, and state drift.
Yes, you can audit OpenTofu, CloudFormation, Pulumi, and CDK repositories. The review process applies to any IaC managing production or shared infrastructure to ensure safe modification.
The best way to map an unfamiliar Terraform estate is to identify the providers, modules, environments, and backend state setup to understand what the code is intended to manage.
asanexampleDiagnose Terraform module failure modes like identity churn and state corruption.
arcasilesgroupGenerate Terraform or Bicep code for cloud infrastructure provisioning.
naporin0624Detect security misconfigurations in Infrastructure as Code using tfsec and Checkov.
stephanjImplement infrastructure as code with Terraform across AWS, Azure, and GCP.
