Terraform Skill
DevOpsby antonbabenko
2/3 audits passApache-2.0
Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops - diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.
Terraform Skill by Anton Babenko is diagnose-first guidance for Terraform and OpenTofu. It defines a response contract: every answer states assumptions and version floor, the risk category addressed, the chosen remediation and its tradeoffs, a validation plan with exact commands, and rollback notes for anything destructive. The workflow captures execution context, diagnoses the failure mode from a routing table (identity churn, secret exposure, blast radius, destroy cascade, CI drift, compliance gaps, testing blind spots, state corruption, provider upgrade risk and more), loads only the matching reference file, then proposes and validates a fix. References cover code and module patterns, state management, testing frameworks, CI/CD, security and compliance, and code intelligence.
Use it when writing, reviewing or debugging Terraform or OpenTofu modules, tests, CI pipelines, scans or state operations. It deliberately refuses direct production applies without a reviewed plan artifact and approval, and never runs destroy without a plan -destroy shown to the user and explicit confirmation.
This is a skill for coding agents such as Claude Code working on infrastructure code. It is published under Apache-2.0 and can be imported into BusinessMCP, though it is not about business data.
What you can do with it
- Fix resource address churn after a refactor with moved blocks
- Review a module for secrets leaking into state or logs
- Pick a testing approach: validate, terraform test or Terratest
- Plan a safe destroy with every affected resource listed
Run it on your business data
Imported into BusinessMCP, Terraform Skill becomes a playbook your AI business analyst applies to your connected GitHub repositories.
Use Terraform Skill in BusinessMCPInstall it in a coding agent
One command adds Terraform Skill to your project.
npx skills add https://github.com/antonbabenko/terraform-skill --skill terraform-skillHow we vetted it
- Source
- antonbabenko/terraform-skill at 0a3a4a6
- Licence
- Apache-2.0
- Security audits (skills.sh)
- Gen Agent Trust Hub: Pass · Socket: Pass · Snyk: Warn
- Bundled scripts
- None, instructions only
- Reviewed by hand
- documents a vendor’s official install script piped to a shell.
Checked 2026-09-25 against its skills.sh listing. How we vet skills
Related skills
All skillsTerraform Style Guide
Generate Terraform HCL code following HashiCorp's official style conventions and best practices. Use when writing, reviewing, or generating Terraform configurations.
AWS CDK Development
AWS Cloud Development Kit (CDK) expert for building cloud infrastructure with TypeScript/Python.
Azure Deploy
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files.
Frequently asked questions
What does every Terraform Skill response include?
Assumptions and version floor, the risk category addressed, the chosen remediation and tradeoffs, a validation plan with exact commands, and rollback notes for destructive changes.
Is Terraform Skill safe to install?
Our static scan flagged pipe-to-shell because a security reference documents installing the Trivy scanner by piping its official install script to sh. It is a standard installer line, and the skill passed the skills.sh security auditors with no FAIL.
Will it apply changes to production?
The skill says never to recommend a direct production apply without a reviewed plan artifact and approval, and never to use -auto-approve on destroy.
Run Terraform Skill against your whole business
Free plan, no credit card.
Use Terraform Skill in BusinessMCP