terraform-review

Score Terraform PR changes against an 8-category best practices checklist.

96|9|Updated Mar 21, 2026
One-click install
npx skills add https://github.com/c0x12c/ai-toolkit --skill terraform-review-c0x12c
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-review
Source: https://github.com/c0x12c/ai-toolkit/tree/main/.codex/skills/terraform-review
Command: npx skills add https://github.com/c0x12c/ai-toolkit --skill terraform-review-c0x12c

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Terraform changes often introduce security, consistency, and maintainability issues. A structured review reduces risk by enforcing best practices before merging.

Core Features & Use Cases

  • 8-category checklist covering structure, state safety, security, naming, modules, variables, providers, and CI/CD.
  • Verdict-driven outputs with Approved, Needs Changes, or Blocked and concrete remediation guidance.
  • CI/CD-ready reports to gate PRs and automate compliance checks.

Quick Start

Run the Terraform Review on a PR to generate an objective verdict and actionable recommendations.

Frequently Asked Questions about terraform-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Terraform PR reviews for infrastructure as code?

Automate Terraform PR reviews by scoring changes against an 8-category checklist covering structure, state, security, naming, modules, variables, providers, and CI/CD to produce a formal verdict with remediation guidance.

What is the best way to enforce Terraform security and code quality in CI/CD?

Enforce Terraform security and code quality by applying a structured review checklist within your CI/CD pipeline to gate PRs with Approved, Needs Changes, or Blocked verdicts and actionable findings.

How does a verdict-driven Terraform review report work?

A verdict-driven Terraform review report works by evaluating PR changes against best practices, then outputting a formal verdict of Approved, Needs Changes, or Blocked alongside explicit findings and concrete remediation steps.

Can I gate infrastructure as code pull requests automatically?

Yes, you can gate infrastructure as code pull requests automatically by integrating CI/CD-ready review reports that block merges based on identified security risks and state handling violations.

What categories are checked during a Terraform code review?

A Terraform code review checks changes across 8 categories: structure, state handling, security, naming, modules, variables, providers, and CI/CD best practices to determine an objective merge verdict.

Does automated Terraform review provide remediation guidance for blockers?

Yes, automated Terraform review provides explicit remediation guidance for blockers, highlighting specific findings across all 8 checklist categories to help developers resolve issues before merging.