terraform-reviewer

Review Terraform .tf files, plans, and modules for security, state, and cost issues.

1|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/filipemotta/devopsai-templates --skill terraform-reviewer-filipemotta
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-reviewer
Source: https://github.com/filipemotta/devopsai-templates/tree/main/skills/terraform
Command: npx skills add https://github.com/filipemotta/devopsai-templates --skill terraform-reviewer-filipemotta

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Terraform infrastructure code review, validation, and best practices to prevent misconfigurations and drift.

Core Features & Use Cases

  • Security-first review: enforce least privilege, secret management, and encrypted state
  • State & modules: validate remote state, module boundaries, and provider constraints
  • Cost optimization: identify inefficient resources and drift

Quick Start

Review a Terraform module to identify security, state, and cost issues and generate a remediation plan.

Frequently Asked Questions about terraform-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Terraform configurations for security and state management issues?

Identify and remediate Terraform configuration issues by applying production-grade criteria to .tf files and plan outputs, enforcing least privilege, encrypted remote state with locking, and explicit variable descriptions to prevent misconfigurations.

What is infrastructure as code drift detection and how does it apply to Terraform modules?

Infrastructure as code drift detection identifies differences between live cloud infrastructure and Terraform state. It applies to Terraform modules by analyzing plan outputs and state management scenarios to flag inconsistencies and inefficient resource allocations.

How do I enforce remote state with locking and provider version pinning in Terraform?

Enforce remote state with locking and provider version pinning by validating Terraform codebases against production-grade review criteria, ensuring infrastructure reliability by checking module boundaries, state configurations, and provider constraints in .tf files.

Can I use this to identify inefficient resources and cost issues in Terraform plans?

Yes, you can identify inefficient resources and cost issues by reviewing Terraform plan outputs and modules. The review process applies cost optimization criteria to flag inefficient resource allocations and detect infrastructure drift across providers.

Does the Terraform review process work without external dependencies or components?

Yes, the Terraform review process works without external dependencies or components. It directly analyzes .tf files, plan outputs, and module boundaries to validate infrastructure as code quality, security, and state management configurations.

What are the limitations of automated Terraform code reviews for infrastructure as code?

Automated Terraform code reviews focus on static .tf files and plan outputs to enforce best practices, but they may not capture complex runtime cloud environment states or custom provider behaviors beyond standard state management and drift detection scenarios.