What problem does it solve?
Terraform teams often ship broken or insecure infrastructure because validation, linting, security scanning, and provider documentation are performed manually and inconsistently, leading to late-stage failures and avoidable risks.
Core Features & Use Cases
- End-to-end Terraform validation: Run formatting checks, initialize/validate configs, lint with tflint when available, and execute deterministic regression/smoke checks.
- Security scanning with guided remediation: Execute Checkov scans and cross-reference every finding to a required security checklist with remediation patterns.
- Provider-aware documentation lookup: Detect explicit and implicit providers and look up provider best-practice documentation via Context7 with WebSearch fallback when needed.
Use case: You want to validate an entire Terraform repo (including modules) before opening a PR by ensuring formatting, correctness, security findings mapped to remediation guidance, and a report that explains sources.
Quick Start
Use this skill to validate the Terraform directory at ./terraform by running the required wrapper-based workflow steps in order.
