Does it support all cloud providers?

Yes, while the skill includes specific patterns for AWS, GCP, and Azure, the general HCL structure, variable validation, and modularity best practices apply to all Terraform providers.

Can it detect hardcoded secrets?

Yes, it specifically checks for sensitive data in variables and tfvars files, recommending the use of secret managers or the 'sensitive = true' flag.

Does this skill replace Terraform Plan?

No, it is a static analysis and code review tool designed to provide architectural and security feedback before or during the planning phase.

Can I focus the review on specific areas?

Yes, the skill allows you to select specific review areas such as full review, module structure, state management, or security and compliance.

Terraform Code Reviewer

Name: Terraform Code Reviewer
Author: physics91

byphysics91

0•

Cloud Infrastructure

Audits Terraform configurations for security vulnerabilities, module optimization, and infrastructure-as-code best practices.

The Terraform Reviewer skill provides automated, deep-dive analysis of HCL code to ensure robust and scalable cloud infrastructure. It evaluates critical components including module organization, remote state backend configurations with locking, and strict security policies like S3 public access or wide-open security groups. By providing actionable feedback on variable validation, sensitivity markers, and resource naming, it helps developers maintain production-grade environments that are secure, cost-effective, and easy to maintain.

Key Features

01Automated module structure and organization optimization

020 GitHub stars

03Remote state backend and DynamoDB/GCS locking verification

04Comprehensive variable validation and sensitivity analysis

05Security audit for IAM, S3, and VPC network configurations

06Standardized resource naming convention and tagging checks

Use Cases

01Performing automated code reviews on infrastructure pull requests

02Refactoring monolithic Terraform files into reusable, parameterized modules

03Auditing existing Terraform projects for security and state management gaps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add physics91/claude-vibe terraform-reviewer

For use in Claude.ai and ChatGPT

Download Skill