What tools does this skill use for validation?

It integrates the native Terraform CLI for syntax checks, TFLint for advanced linting, and Checkov for comprehensive security policy scanning.

Do I need to have Terraform installed to use this skill?

Yes, this skill requires the Terraform CLI and security tools like Checkov to be installed in your local environment to execute its validation scripts.

Does it support complex module structures?

Yes, it includes a dedicated wrapper script to extract information from both local and remote modules, ensuring that all resources in the dependency tree are accounted for.

Can it fix my Terraform code automatically?

It can perform automated formatting using 'terraform fmt' and provides specific, copy-pasteable remediation patterns for security issues identified during scans.

How does it handle provider-specific documentation?

The skill utilizes the Context7 MCP to fetch documentation for specific providers (like AWS or GCP) and automatically falls back to WebSearch for utility providers like 'random' or 'null'.

Terraform Infrastructure Validator

Name: Terraform Infrastructure Validator
Author: sudohakan

bysudohakan

•

Cloud Infrastructure

Automates Terraform configuration validation, security scanning, and documentation lookup to ensure production-grade infrastructure-as-code.

Terraform Validator is a comprehensive toolkit designed to streamline the Infrastructure-as-Code development lifecycle within Claude Code. It provides a structured workflow for linting, formatting, and validating HCL files while integrating advanced security scanning via Checkov and intelligent provider documentation retrieval. By cross-referencing configurations against curated security checklists and best practices, it helps developers identify misconfigurations, enforce organizational standards, and generate detailed remediation reports before any infrastructure is deployed.

Key Features

01Intelligent provider documentation lookup via Context7 and WebSearch

02Deep security scanning and policy enforcement using Checkov integration

03Automatic detection of both explicit and implicit Terraform providers

042 GitHub stars

05Automated syntax validation and recursive HCL formatting

06Comprehensive reporting with mapped security remediation patterns and best practices

Use Cases

01Standardizing HCL code quality and naming conventions across distributed engineering teams

02Security auditing of existing IaC repositories to identify overly permissive configurations

03Pre-deployment validation of complex Terraform modules to prevent runtime errors

Key Features

01Intelligent provider documentation lookup via Context7 and WebSearch

02Deep security scanning and policy enforcement using Checkov integration

03Automatic detection of both explicit and implicit Terraform providers

042 GitHub stars

05Automated syntax validation and recursive HCL formatting

06Comprehensive reporting with mapped security remediation patterns and best practices

Use Cases

01Standardizing HCL code quality and naming conventions across distributed engineering teams

02Security auditing of existing IaC repositories to identify overly permissive configurations

03Pre-deployment validation of complex Terraform modules to prevent runtime errors