terraform-skill

The Terraform Skill provides diagnose-first guidance for working with Terraform and OpenTofu infrastructure-as-code. It helps developers and DevOps engineers identify and resolve common failure modes before they cause production incidents. Rather than jumping straight to code generation, this skill analyzes the execution context, diagnoses the root cause category, and applies version-aware guardrails to ensure safe infrastructure changes.

The skill addresses seven critical failure categories: identity churn (resource address shifts during refactors), secret exposure (credentials leaked in state or logs), blast radius (oversized stacks affecting multiple environments), destroy cascades (unintended resource deletion), CI drift (local and CI plans diverging), compliance gaps (missing approvals or policy checks), and state corruption. For each category, it loads targeted reference material and generates fixes with explicit risk controls, rollback procedures, and validation commands.

Designed for infrastructure engineers managing Terraform/OpenTofu codebases, this skill enforces a response contract requiring assumption documentation, risk categorization, remediation rationale with tradeoffs, validation plans, and rollback notes. It prevents common mistakes like running destroy without plan review or applying directly to production without artifact approval. The skill supports both local and CI/CD workflows across multiple execution environments including Terraform Cloud and Atlantis.