ywc-infra-review

Analyze Terraform infrastructure-as-code for security, cost, and reliability issues.

8|1|Updated May 13, 2026
One-click install
npx skills add https://github.com/yongwoon/ywc-agent-toolkit --skill ywc-infra-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ywc-infra-review
Source: https://github.com/yongwoon/ywc-agent-toolkit/tree/main/claude-code/skills/ywc-infra-review
Command: npx skills add https://github.com/yongwoon/ywc-agent-toolkit --skill ywc-infra-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, gh, and includes references (resource) components.

What problem does it solve?

This skill prevents costly and dangerous infrastructure deployments by identifying misconfigurations, security vulnerabilities, and waste in Terraform code before it is ever applied.

Core Features & Use Cases

  • Multi-Lens Analysis: Simultaneously evaluates infrastructure for security (IAM/least-privilege), cost (right-sizing/waste), and reliability (SPOF/backups).
  • Severity-Rated Reporting: Aggregates findings into a clear report with explicit blocking recommendations for critical issues.
  • Use Case: Before applying a new network module, use this skill to ensure no security groups are open to the public and that compute instances are not over-provisioned.

Quick Start

Run the ywc-infra-review skill to analyze the Terraform configuration in the current directory for security, cost, and reliability issues.

Frequently Asked Questions about ywc-infra-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform infrastructure-as-code for security misconfigurations before applying?

You can analyze Terraform infrastructure-as-code for security misconfigurations by running a multi-lens review that checks IAM least-privilege, cost right-sizing, and reliability gaps across AWS, GCP, Azure, and Kubernetes providers, providing severity-rated findings without modifying the code.

Does this Terraform review tool support AWS, GCP, Azure, and Kubernetes provider scopes?

Yes, the Terraform review tool supports AWS, GCP, Azure, and Kubernetes provider scopes, analyzing infrastructure-as-code across these environments to identify security vulnerabilities, cost inefficiencies, and reliability gaps.

What is the best way to check Terraform code for cost inefficiencies and over-provisioned compute instances?

The best way to check Terraform code for cost inefficiencies is to run a multi-lens analysis that evaluates compute instances for right-sizing and waste, providing severity-rated findings and apply-blocking recommendations for critical issues.

Can I prevent dangerous infrastructure deployments by identifying single points of failure in Terraform?

Yes, you can prevent dangerous infrastructure deployments by analyzing Terraform configurations for reliability gaps such as single points of failure and missing backups, receiving explicit apply-blocking recommendations before deployment.

Do I need Python3 and GitHub CLI to run a Terraform infrastructure review?

Yes, you need Python3 and the GitHub CLI installed as dependencies to run the Terraform infrastructure review, which generates a severity-rated report of security, cost, and reliability findings.

Will this Terraform security analysis modify my underlying infrastructure code?

No, the Terraform security analysis does not modify your underlying code; it operates across AWS, GCP, Azure, and Kubernetes scopes to provide severity-rated findings and apply-blocking recommendations without altering the configuration.