skills.rest
sudohakan
sudohakanCOMMUNITY
Explore all skills by this author →
GitHub

terraform-validator

Validate, lint, and scan Terraform and HCL configurations for security vulnerabilities.

Updated Aug 27, 2026
Search Tags:#devops#linting#security#validation#terraform#iac
One-click install
npx skills add https://github.com/sudohakan/claude-code-dotfiles --skill terraform-validator-sudohakan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: terraform-validator
Source: https://github.com/sudohakan/claude-code-dotfiles/tree/main/config/skills/cc-devops-skills/devops-skills-plugin/skills/terraform-validator
Command: npx skills add https://github.com/sudohakan/claude-code-dotfiles --skill terraform-validator-sudohakan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python-hcl2, checkov, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the comprehensive validation, linting, and security scanning of Terraform and HCL configurations, ensuring infrastructure-as-code is robust, compliant, and secure.

Core Features & Use Cases

  • Syntax & Formatting: Ensures Terraform code adheres to best practices and formatting standards.
  • Security Scanning: Identifies common security misconfigurations using tools like Checkov.
  • Provider Validation: Looks up and validates provider configurations against documentation.
  • Use Case: Before deploying infrastructure changes, use this Skill to automatically check for security vulnerabilities, syntax errors, and adherence to best practices in your Terraform code.

Quick Start

Use the terraform-validator skill to validate the Terraform files in the current directory.

Frequently Asked Questions about terraform-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate and lint Terraform configurations for security vulnerabilities?▼

This Skill automates comprehensive Terraform validation by running wrapper scripts that check syntax, formatting, provider configurations, and security misconfigurations using Checkov and TFLint.

What is the best way to check HCL files for infrastructure-as-code security misconfigurations?▼

Scanning HCL files with Checkov identifies common security misconfigurations and verifies adherence to infrastructure-as-code best practices before deployment.

Does this Terraform validator work with Checkov and python-hcl2?▼

Yes, the validator requires Checkov and python-hcl2 as dependencies to parse configurations and execute security analysis wrapper scripts.

Can I automatically check Terraform code against provider documentation before deploying?▼

Yes, executing wrapper scripts extracts provider information and validates configurations against looked-up provider documentation automatically.

Why do I need to run wrapper scripts for Terraform security scanning?▼

Wrapper scripts are required because security scanning and provider extraction processes need external execution to parse configurations and interface with Checkov.

Related Skills

Explore More Software Engineering Skills→
partme-aipartme-ai
610

terraform

Guide Terraform infrastructure as code with HCL syntax and state management.

Official
Intermediate
igpastorigpastor

Infrastructure as Code Skill

Generate Terraform, Kubernetes, Helm, CloudFormation, and Docker Compose configurations for cloud resources.

Community
Advanced
takumi12311123takumi12311123
1

infra-terraform

Enforce Terraform infrastructure as code best practices across environments.

Community
Advanced
LusciiLuscii

terraform-syntax

Guide Terraform HCL syntax for writing, reviewing, and validating configurations.

Official
Basic