terraform-style-check

Audit Terraform and OpenTofu configurations for style, security, and compliance issues.

Updated Feb 18, 2026
One-click install
npx skills add https://github.com/Greenmamba29/skillsdotmd_web --skill terraform-style-check-greenmamba29
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-style-check
Source: https://github.com/Greenmamba29/skillsdotmd_web/tree/main/.agents/skills/terraform-style-check
Command: npx skills add https://github.com/Greenmamba29/skillsdotmd_web --skill terraform-style-check-greenmamba29

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses inconsistencies and potential security vulnerabilities in Terraform and OpenTofu infrastructure-as-code by auditing configurations against established style guides, security best practices, and compliance requirements.

Core Features & Use Cases

  • Style Auditing: Enforces naming conventions, file organization, and declaration standards.
  • Best Practice Checks: Verifies correct module versioning, remote state configuration, and sensitive variable handling.
  • Security Auditing: Identifies overly permissive IAM policies, insecure network configurations, and unencrypted resources.
  • Compliance Checks: Ensures adherence to organizational tagging standards and security baselines.
  • Use Case: A DevOps team can use this skill to automatically scan all new Terraform pull requests, ensuring they meet the company's security and style standards before merging, thus reducing manual review time and preventing misconfigurations.

Quick Start

Run the terraform-style-check skill on the './infrastructure/aws' directory with a 'full' check level and 'production' profile.

Frequently Asked Questions about terraform-style-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Terraform configurations for security best practices and compliance?

To audit Terraform configurations, this skill analyzes IAM least-privilege patterns, remote state configuration, and encryption standards. It generates detailed reports with severity ratings and actionable fixes for identified security and compliance issues.

Does this tool check OpenTofu infrastructure-as-code for naming conventions and style?

Yes, this tool audits OpenTofu infrastructure-as-code for style adherence. It enforces naming conventions, file organization, and declaration standards, ensuring your IaC configurations meet established style guide requirements.

How do I scan Terraform pull requests for misconfigurations and insecure resources?

You can scan Terraform pull requests by running this skill on your infrastructure directory. It identifies overly permissive IAM policies, insecure network configurations, and unencrypted resources, providing actionable fixes before merging.

What is the best way to enforce organizational tagging standards in Terraform?

The best way to enforce tagging standards is through automated compliance checks. This skill audits your Terraform configurations against organizational tagging standards and security baselines, reporting deviations with detailed severity ratings.

Can I use this skill to verify remote state configuration and sensitive variable handling in IaC?

Yes, you can use this skill to verify remote state configuration and sensitive variable handling. It performs best practice checks to ensure correct module versioning and secure management of sensitive variables across your infrastructure code.

Why does my Terraform code fail compliance checks for IAM policies?

Terraform code fails compliance checks when IAM policies are overly permissive. This skill analyzes your configurations for IAM least-privilege patterns and insecure network setups, generating reports that highlight failures and suggest actionable fixes.