terraform-review

Review Terraform configurations for structural, security, and operational gaps.

Updated Mar 24, 2026
One-click install
npx skills add https://github.com/foutoucour/guitar-match --skill terraform-review-foutoucour
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-review
Source: https://github.com/foutoucour/guitar-match/tree/main/.claude/skills/terraform-review
Command: npx skills add https://github.com/foutoucour/guitar-match --skill terraform-review-foutoucour

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Terraform configurations often drift from recommended structures, expose security gaps, and suffer from unmanaged state, making deployments error-prone and hard to audit.

Core Features & Use Cases

  • Enforces a thin root module design with clear inputs/outputs and well-documented modules
  • Verifies remote state usage, environment separation, locking, and drift-detection readiness
  • Checks provider version pinning, lockfile commitment, and avoidance of hardcoded credentials
  • Applies comprehensive tagging and lifecycle/maintenance best-practices across resources

Quick Start

Run a structured Terraform review on your repository to identify structural, security, and operational issues.

Frequently Asked Questions about terraform-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce Terraform best practices across multiple environments like dev, staging, and prod?

Enforce Terraform best practices by running a structured review to identify structural, security, and operational gaps across dev, staging, and prod environments. It checks root modules, child modules, providers, and state management configurations.

What is the best way to check for hardcoded credentials and security gaps in my infrastructure as code?

Check for hardcoded credentials and security gaps by reviewing your Terraform configurations for provider version pinning, lockfile commitment, and avoidance of hardcoded credentials. This ensures infrastructure as code remains secure and auditable.

How do I verify remote state usage and locking for Terraform state management?

Verify remote state usage and locking by reviewing your state backend configuration for environment separation, locking, and drift-detection readiness. This solves unmanaged state issues that make deployments error-prone and hard to audit.

Does this code review process work for both module repositories and live environments?

Yes, this code review process works for both module repositories and live environments. It applies to reviews of root modules, child modules, providers, and state management across all environments.

How do I enforce a thin root module design with clear inputs and outputs in Terraform?

Enforce a thin root module design by verifying clear inputs, outputs, and well-documented modules during your Terraform review. This prevents configurations from drifting from recommended structures and ensures maintainability.

Can I check Terraform tagging and lifecycle best-practices across all resources?

Yes, you can check tagging and lifecycle best-practices across all resources. The review applies comprehensive maintenance best-practices to ensure your Terraform configurations satisfy module structure checks and operational requirements.