terraform-patterns

Analyze Terraform code for security vulnerabilities and structural anti-patterns.

Updated Nov 3, 2016
One-click install
npx skills add https://github.com/xleliberty/mydotfiles --skill terraform-patterns-xleliberty
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: terraform-patterns
Source: https://github.com/xleliberty/mydotfiles/tree/main/.config/.claude/plugins/cache/claude-code-skills/engineering-advanced-skills/2.1.2/terraform-patterns
Command: npx skills add https://github.com/xleliberty/mydotfiles --skill terraform-patterns-xleliberty

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill addresses the complexity of managing infrastructure-as-code by providing a standardized, secure, and maintainable workflow for Terraform projects, preventing common anti-patterns and configuration drift.

Core Features & Use Cases

  • Automated Code Review: Analyze Terraform directories for security vulnerabilities, naming convention violations, and structural anti-patterns.
  • Module Design: Generate standardized module scaffolds and enforce best practices for inputs, outputs, and composition.
  • Security Auditing: Scan infrastructure code for hardcoded secrets, overly permissive IAM policies, and unencrypted storage resources.

Quick Start

Use the terraform patterns skill to run a security audit and code review on the current directory.

Frequently Asked Questions about terraform-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform code for security vulnerabilities and hardcoded secrets?▼

Run an automated security audit on your Terraform directories to detect hardcoded secrets, overly permissive IAM policies, and unencrypted storage resources.

What are common Terraform anti-patterns and how do I check for configuration drift?▼

Terraform anti-patterns include structural design flaws and naming convention violations. Analyze your directories to detect these issues and prevent configuration drift in infrastructure-as-code.

How do I generate standardized Terraform module scaffolds for multi-environment deployments?▼

Generate standardized module scaffolds to enforce best practices for inputs, outputs, and composition, satisfying requirements for multi-environment deployments and state management.

Can I use this to enforce least-privilege security hardening for production-grade infrastructure?▼

Yes, you can enforce least-privilege security hardening by analyzing code for production-grade infrastructure compliance, ensuring secure and maintainable Terraform workflows.

What's the best way to automate Terraform code reviews for naming conventions and structural issues?▼

Automate code reviews by analyzing Terraform directories for naming convention violations, structural anti-patterns, and module design compliance to maintain standardized infrastructure.