Analyze Terraform plan output and classify changes by risk.
npx skills add https://github.com/cacheforge-ai/cacheforge-skills --skill tf-plan-review
Please help me install this Agent Skill. Skill: tf-plan-review Source: https://github.com/cacheforge-ai/cacheforge-skills/tree/main/skills/tf-plan-review Command: npx skills add https://github.com/cacheforge-ai/cacheforge-skills --skill tf-plan-review
Analyzes Terraform plan output to identify risks, highlight potentially destructive changes, and prevent unsafe deployments by providing a clear risk assessment while keeping all actions read-only.
Run the tf-plan-review workflow on a Terraform project to obtain a structured JSON summary and a Markdown risk report.
High-intent search queries and answers about installing and using this skill.
To review Terraform plan risk before applying changes, you can analyze the plan output to classify every resource change by risk level, highlighting destructive actions and blast radius without modifying your cloud infrastructure.
Yes, you can detect Terraform state drift without applying changes by inspecting the plan output to validate configuration and surface unexpected state modifications. This read-only validation reveals drift while ensuring no actual infrastructure deployments occur during the review process.
Yes, the pre-apply Terraform plan review works with OpenTofu. It requires either the terraform or OpenTofu CLI tool installed to parse plan output, functioning across cloud providers to classify infrastructure-as-code changes by risk level before deployment.
The best way to visualize the blast radius of a Terraform destroy action is to analyze the plan output to reveal exactly what resources would be deleted or replaced, along with their dependencies, outputting a structured Markdown risk report for human review.
To get structured JSON output from a Terraform plan for automated agents, run a read-only plan review that parses the plan and emits classified risk data as JSON on stdout, alongside a human-readable Markdown risk report on stderr for immediate pipeline integration.
Yes, you need jq installed along with either terraform or OpenTofu to review Terraform plan output for destructive changes. These dependencies are required to parse the plan file and classify resource modifications into structured risk assessments.
infraspecdevAnalyze Terraform plan JSON to identify destructive changes, security risks, and cost impact.
CENKSSSPrioritize testing efforts by risk assessment with structured JSON output.
prototypdigitalVerify infrastructure-as-code consistency with deployed Terraform, Ansible, Kubernetes, and Docker Compose configurations.
fabnGenerate safety-categorized Terraform plan previews for repository root modules.
