Does it support all cloud providers?

Yes, while the skill includes specific patterns for AWS, GCP, and Azure, the general HCL structure, variable validation, and modularity best practices apply to all Terraform providers.

Can it detect hardcoded secrets?

Yes, it specifically checks for sensitive data in variables and tfvars files, recommending the use of secret managers or the 'sensitive = true' flag.

Does this skill replace Terraform Plan?

No, it is a static analysis and code review tool designed to provide architectural and security feedback before or during the planning phase.

Can I focus the review on specific areas?

Yes, the skill allows you to select specific review areas such as full review, module structure, state management, or security and compliance.

Terraform Code Reviewer

Name: Terraform Code Reviewer
Author: physics91

byphysics91

クラウドインフラストラクチャ

Audits Terraform configurations for security vulnerabilities, module optimization, and infrastructure-as-code best practices.

概要

The Terraform Reviewer skill provides automated, deep-dive analysis of HCL code to ensure robust and scalable cloud infrastructure. It evaluates critical components including module organization, remote state backend configurations with locking, and strict security policies like S3 public access or wide-open security groups. By providing actionable feedback on variable validation, sensitivity markers, and resource naming, it helps developers maintain production-grade environments that are secure, cost-effective, and easy to maintain.

主な機能

Automated module structure and organization optimization
0 GitHub stars
Remote state backend and DynamoDB/GCS locking verification
Comprehensive variable validation and sensitivity analysis
Security audit for IAM, S3, and VPC network configurations
Standardized resource naming convention and tagging checks

ユースケース

Performing automated code reviews on infrastructure pull requests
Refactoring monolithic Terraform files into reusable, parameterized modules
Auditing existing Terraform projects for security and state management gaps

概要

主な機能

Automated module structure and organization optimization
0 GitHub stars
Remote state backend and DynamoDB/GCS locking verification
Comprehensive variable validation and sensitivity analysis
Security audit for IAM, S3, and VPC network configurations
Standardized resource naming convention and tagging checks

ユースケース

Performing automated code reviews on infrastructure pull requests
Refactoring monolithic Terraform files into reusable, parameterized modules
Auditing existing Terraform projects for security and state management gaps