How does the parallel analysis work?

It dispatches three specialized sub-agents simultaneously to analyze operational risks, security compliance, and historical Git patterns to provide a comprehensive summary.

Does this skill automatically apply Terraform changes?

No, the skill enforces a safety-first approach and will never run 'terraform apply' without explicit user approval after the analysis is presented.

Can I use this with OpenTofu?

Yes, the skill is designed to be fully compatible with both Terraform and OpenTofu workflows, including plan generation and JSON analysis.

Which cloud providers are supported?

While the skill includes specific AWS identity verification, the core logic for plan analysis and risk assessment works with any provider supported by Terraform or OpenTofu.

What happens if there is an AWS account mismatch?

The skill verifies the AWS caller identity against the expected environment at the start and will stop the process immediately if a mismatch is detected to prevent cross-account errors.

Terraform Plan Review

Name: Terraform Plan Review
Author: lgbarn

bylgbarn

0•

배포 및 DevOps

Analyzes Terraform and OpenTofu plans for operational risks, security vulnerabilities, and breaking changes before deployment.

This skill provides a safety-first workflow for infrastructure-as-code management by performing multi-layered analysis on Terraform or OpenTofu plan outputs. It utilizes parallel sub-agents to evaluate operational risks, security implications (IAM, networking, encryption), and historical git patterns to identify potential regressions. By enforcing environment verification and requiring explicit human approval before any 'apply' operation, it mitigates the risk of accidental resource destruction or security misconfigurations in cloud environments like AWS.

주요 기능

01Standardized risk categorization from Critical to Low

02Mandatory AWS profile and account identity verification

03Automated plan-to-JSON conversion for deep structural inspection

04Multi-agent parallel risk, security, and historical pattern analysis

050 GitHub stars

06Strict human-in-the-loop approval gate for all apply operations

사용 사례

01Reviewing complex infrastructure changes before applying to production environments

02Identifying hidden resource destruction or cascade effects in large Terraform plans

03Auditing IAM and security group modifications for potential security gaps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lgbarn/devops-skills terraform-plan-review

For use in Claude.ai and ChatGPT

Download Skill