tf_plan_only

Run Terraform init and plan, then generate a risk summary without applying.

1|Updated Oct 19, 2025
One-click install
npx skills add https://github.com/acartine/osterman --skill tf-plan-only
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tf_plan_only
Source: https://github.com/acartine/osterman/tree/main/skills/tf_plan_only
Command: npx skills add https://github.com/acartine/osterman --skill tf-plan-only

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates safe Terraform planning and risk assessment, producing a clear report before any apply so teams can review changes without executing them.

Core Features & Use Cases

  • Plan generation: Run terraform plan in the project context and produce a structured plan_summary.
  • Risk assessment: Identify adds/changes/destroys and highlight high-risk resources for proactive review.
  • Safety guardrails: Prevents applies and documents the required approvals for changes.

Quick Start

Run tf_plan_only against your project directory to generate a plan and risk summary without performing an apply.

Frequently Asked Questions about tf_plan_only

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a Terraform plan without applying changes to review infrastructure modifications safely?

You can run a Terraform plan without applying changes to generate a structured plan summary and risk assessment. This process executes terraform init and plan, highlighting adds, changes, and destroys for proactive review before any execution.

What is a Terraform dry run and how does risk assessment work for infrastructure as code?

A Terraform dry run executes a plan to preview infrastructure changes without execution. Risk assessment identifies high-risk resources within the generated plan summary, ensuring teams review modifications and document required approvals safely.

Can I target specific resources or use multiple workspaces when running a Terraform plan?

Yes, you can target specific resources and execute plans across multiple workspaces. The planning process runs terraform init and plan, scoping the execution to targeted resources if present, and returns a structured plan summary for review.

Does this Terraform planning approach block apply actions automatically?

Yes, this approach enforces safety guardrails that explicitly block apply actions. It runs only init and plan operations, producing a risk assessment and plan summary while ensuring no infrastructure modifications are executed without documented approvals.

What's the best way to assess infrastructure as code risk before modifying cloud resources?

The best way to assess infrastructure as code risk is to run a targeted plan that generates a risk summary. This identifies high-risk resources and documents required approvals, allowing teams to review changes safely before execution.

Why should I use a plan-only approach instead of directly applying Terraform changes?

A plan-only approach prevents accidental infrastructure modifications by blocking apply actions. It provides a structured plan summary and highlights high-risk resources, enabling teams to review changes and document approvals before execution.