terraform-security-audit — Claude Code skill for Terraform checks
Reviews Terraform files for security issues across six areas and returns a pass-or-fail report. Run it before a deployment or when reviewing a new service.
npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a claude-codeWhat terraform-security-audit does
The skill examines .tf files for risks involving IAM, network rules, encryption, secrets, cluster access, and compliance. Its report gives each area a status and puts severe findings, such as a publicly reachable database, first. It also suggests code changes for checks that fail.
It uses file reading and search tools to inspect the project. The skill reports findings rather than editing Terraform itself. It covers every audit area, including AWS settings, resource tags, backups, and logging.
What it helps with
- spot IAM policies with overly broad permissions
- find databases exposed to public traffic
- check encryption settings for storage and connections
- catch secrets embedded in Terraform files
- review resource tags and backup settings
Example prompts for the agent
- Audit this Terraform project and list the critical security findings first.
- Review the infrastructure before deployment and suggest code fixes for failed checks.
- Inspect all
.tffiles and write a report for each security area.
How to install terraform-security-audit
1Skills CLI (Vercel)
npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a claude-code2Manually: put the files in place
~/.claude/skills/terraform-security-audit/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/terraform-security-audit/
1Skills CLI (Vercel)
npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a codex2Manually: put the files in place
.agents/skills/terraform-security-audit/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a cursor2Manually: put the files in place
.cursor/skills/terraform-security-audit/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install c0x12c/ai-toolkit terraform-security-audit2Manually: put the files in place
.github/skills/terraform-security-audit/SKILL.md1Skills CLI (Vercel)
npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a gemini-cli2Platform CLI
gemini skills install https://github.com/c0x12c/ai-toolkit --path toolkit/skills/terraform-security-auditManually: put the files in place
.devin/skills/terraform-security-audit/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about terraform-security-audit
How do I install terraform-security-audit in Claude Code?
Run npx skills add c0x12c/ai-toolkit --skill terraform-security-audit -a claude-code. The skill file is at ~/.claude/skills/terraform-security-audit/SKILL.md.
What does terraform-security-audit do?
It checks Terraform code across six security areas and creates a report with statuses and prioritized findings. It also suggests code changes for failed checks.
Which security areas does the skill review?
It reviews IAM, network rules, encryption, secrets, cluster access, and compliance topics such as tags and backups.
