Does it require an existing JSON plan file?

The skill can parse existing JSON, convert a binary .tfplan file, or generate a fresh plan for you if you have initialized Terraform in your current directory.

How does it identify security risks?

It scans for modifications to sensitive resources such as IAM policies, network security groups, encryption settings, and public access configurations to flag potential vulnerabilities.

Will it block my CI/CD pipeline by locking state?

No, the skill is configured to use the -lock=false flag, ensuring it can perform analysis without acquiring a state lock or interrupting other team members.

Can this skill deploy infrastructure changes?

No, this skill is strictly read-only and will never execute 'terraform apply'. Its purpose is analysis and reporting to ensure safety before you manually apply changes.

Terraform Plan Analyzer

Name: Terraform Plan Analyzer
Author: infraspecdev

byinfraspecdev

•

Deployment & DevOps

Analyzes Terraform plan outputs to identify security risks, cost impacts, and destructive infrastructure changes before deployment.

The Terraform Plan Analyzer is a specialized Claude Code skill designed to safeguard infrastructure deployments by deeply inspecting the JSON output of Terraform plans. It moves beyond simple syntax checking to evaluate the actual operational impact of a change, flagging high-risk actions like resource destruction, security group modifications, and unexpected cost increases. By generating detailed analysis reports and assigning safety verdicts, it helps engineers prevent accidental outages and maintain governance over cloud environments through a read-only, non-intrusive workflow.

Key Features

01Automated out-of-band drift detection and reporting

021 GitHub stars

03Security-sensitive change detection for IAM, networking, and encryption

04Identification of destructive actions and stateful resource replacements

05Estimated cost-impact analysis for infrastructure modifications

06Safety verdict generation (Safe to Apply, Review Required, or Do Not Apply)

Use Cases

01Automated review of infrastructure-as-code changes within PR workflows

02Pre-deployment risk assessment for production cloud environments

03Validation of resource imports and state migrations to prevent unintended drift

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add infraspecdev/tesseract terraform

For use in Claude.ai and ChatGPT