terraform-review

Score Terraform PR changes against an 8-category best practices checklist.

96|9|Updated Mar 21, 2026
One-click install
npx skills add https://github.com/c0x12c/ai-toolkit --skill terraform-review-c0x12c
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: terraform-review
Source: https://github.com/c0x12c/ai-toolkit/tree/main/.codex/skills/terraform-review
Command: npx skills add https://github.com/c0x12c/ai-toolkit --skill terraform-review-c0x12c

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Terraform changes often introduce security, consistency, and maintainability issues. A structured review reduces risk by enforcing best practices before merging.

Core Features & Use Cases

  • 8-category checklist covering structure, state safety, security, naming, modules, variables, providers, and CI/CD.
  • Verdict-driven outputs with Approved, Needs Changes, or Blocked and concrete remediation guidance.
  • CI/CD-ready reports to gate PRs and automate compliance checks.

Quick Start

Run the Terraform Review on a PR to generate an objective verdict and actionable recommendations.

Frequently Asked Questions about terraform-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Terraform PR reviews for infrastructure as code?▼

Automate Terraform PR reviews by scoring changes against an 8-category checklist covering structure, state, security, naming, modules, variables, providers, and CI/CD to produce a formal verdict with remediation guidance.

What is the best way to enforce Terraform security and code quality in CI/CD?▼

Enforce Terraform security and code quality by applying a structured review checklist within your CI/CD pipeline to gate PRs with Approved, Needs Changes, or Blocked verdicts and actionable findings.

How does a verdict-driven Terraform review report work?▼

A verdict-driven Terraform review report works by evaluating PR changes against best practices, then outputting a formal verdict of Approved, Needs Changes, or Blocked alongside explicit findings and concrete remediation steps.

Can I gate infrastructure as code pull requests automatically?▼

Yes, you can gate infrastructure as code pull requests automatically by integrating CI/CD-ready review reports that block merges based on identified security risks and state handling violations.

What categories are checked during a Terraform code review?▼

A Terraform code review checks changes across 8 categories: structure, state handling, security, naming, modules, variables, providers, and CI/CD best practices to determine an objective merge verdict.

Does automated Terraform review provide remediation guidance for blockers?▼

Yes, automated Terraform review provides explicit remediation guidance for blockers, highlighting specific findings across all 8 checklist categories to help developers resolve issues before merging.