terraform-patterns

Analyze Terraform code for security vulnerabilities and structural anti-patterns.

Updated Nov 3, 2016
One-click install
npx skills add https://github.com/xleliberty/mydotfiles --skill terraform-patterns-xleliberty
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-patterns
Source: https://github.com/xleliberty/mydotfiles/tree/main/.config/.claude/plugins/cache/claude-code-skills/engineering-advanced-skills/2.1.2/terraform-patterns
Command: npx skills add https://github.com/xleliberty/mydotfiles --skill terraform-patterns-xleliberty

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill addresses the complexity of managing infrastructure-as-code by providing a standardized, secure, and maintainable workflow for Terraform projects, preventing common anti-patterns and configuration drift.

Core Features & Use Cases

  • Automated Code Review: Analyze Terraform directories for security vulnerabilities, naming convention violations, and structural anti-patterns.
  • Module Design: Generate standardized module scaffolds and enforce best practices for inputs, outputs, and composition.
  • Security Auditing: Scan infrastructure code for hardcoded secrets, overly permissive IAM policies, and unencrypted storage resources.

Quick Start

Use the terraform patterns skill to run a security audit and code review on the current directory.

Frequently Asked Questions about terraform-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform code for security vulnerabilities and hardcoded secrets?

Run an automated security audit on your Terraform directories to detect hardcoded secrets, overly permissive IAM policies, and unencrypted storage resources.

What are common Terraform anti-patterns and how do I check for configuration drift?

Terraform anti-patterns include structural design flaws and naming convention violations. Analyze your directories to detect these issues and prevent configuration drift in infrastructure-as-code.

How do I generate standardized Terraform module scaffolds for multi-environment deployments?

Generate standardized module scaffolds to enforce best practices for inputs, outputs, and composition, satisfying requirements for multi-environment deployments and state management.

Can I use this to enforce least-privilege security hardening for production-grade infrastructure?

Yes, you can enforce least-privilege security hardening by analyzing code for production-grade infrastructure compliance, ensuring secure and maintainable Terraform workflows.

What's the best way to automate Terraform code reviews for naming conventions and structural issues?

Automate code reviews by analyzing Terraform directories for naming convention violations, structural anti-patterns, and module design compliance to maintain standardized infrastructure.