# terraform-review

Walks Terraform changes through an 8-category checklist and returns a verdict: Approved, Needs Changes or Blocked. Useful before merging an infrastructure PR.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · ★ 109
- Author: c0x12c
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/c0x12c/ai-toolkit/tree/HEAD/toolkit/skills/terraform-review/SKILL.md
- Updated: 2026-06-18
- HTML: https://affpapa.org/en/nevibecode/skills/terraform-review

## What it does

The skill opens the changed `.tf` files in a pull request and works through eight sections: file structure, state safety, security, naming, modules, variables, providers, CI/CD. No section gets skipped. Every finding points at a file and a line.

You get back a structured report with a verdict and a per-category table. Blocking problems — secrets in code, missing state locking, `0.0.0.0/0` ingress, encryption turned off — sit apart from naming and style notes. The skill only has `Read`, `Glob` and `Grep` at its disposal, so it edits nothing and never runs `terraform`.

The checklist carries its own conventions: a `live/`, `modules/`, `envs/` layout, one resource per file inside modules, `prevent_destroy` on critical resources, module versions pinned as `?ref=vX.Y.Z`. A repo laid out differently will trip over some of those points, so compare the checklist against your own rules before making the skill part of mandatory review.

## Requirements
- Works with: Terraform

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill terraform-review -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/terraform-review/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/terraform-review/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill terraform-review -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/terraform-review/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill terraform-review -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/terraform-review/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install c0x12c/ai-toolkit terraform-review
```

2. **Manually: put the files in place**
- File: `.github/skills/terraform-review/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill terraform-review -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/c0x12c/ai-toolkit --path toolkit/skills/terraform-review
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/terraform-review/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill terraform-review -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/c0x12c/ai-toolkit/tree/HEAD/toolkit/skills/terraform-review/SKILL.md

## When to use it
- catch secrets in `.tfvars` before the merge
- confirm state lives in S3 with DynamoDB locking
- spot critical resources missing `prevent_destroy`
- check naming and tags across every resource in a module
- self-review your own PR before opening it

## Example prompts
- Review the Terraform changes in this PR against the checklist
- Check `modules/rds` and list blocking issues separately
- Run a self-review over my `.tf` files before I merge

## Similar
- [wizard](https://affpapa.org/en/nevibecode/skills/wizard.md) — skill · 553369 installs
- [hyperframes-cli](https://affpapa.org/en/nevibecode/skills/heygen-com-hyperframes-cli.md) — skill · 1300000 installs
- [setup-pre-commit](https://affpapa.org/en/nevibecode/skills/setup-pre-commit.md) — skill · 489289 installs
- [using-git-worktrees](https://affpapa.org/en/nevibecode/skills/using-git-worktrees.md) — skill · 217153 installs
- [finishing-a-development-branch](https://affpapa.org/en/nevibecode/skills/finishing-a-development-branch.md) — skill · 214439 installs
- [orca-cli](https://affpapa.org/en/nevibecode/skills/orca-cli.md) — skill · 354000 installs

From the same set: [c0x12c/ai-toolkit](https://affpapa.org/en/nevibecode/by/c0x12c/ai-toolkit.md) — 11 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md