Can it help prevent database downtime?

Yes, it specifically reviews migration files for safety, ensuring that rollouts are versioned correctly and that rollback procedures are viable to prevent data loss or service interruption.

How does it detect security risks?

It applies checklists for least-privilege access, checks for potential secret exposure in logs, identifies PII leaks, and reviews deployment pipeline security configurations.

Does this skill work with any cloud provider?

Yes, it is designed to review agnostic patterns found in common IaC and CI/CD tools used across AWS, GCP, Azure, and on-premise environments.

What types of infrastructure files does this skill analyze?

The skill analyzes Terraform files, CloudFormation templates, Kubernetes manifests, CI/CD configuration files (like GitHub Actions or GitLab CI), and database migration scripts.

What is included in the output report?

The report includes critical blockers, high-to-medium priority issues, an infrastructure component map, and an overall assessment of production readiness.

Infrastructure Review & DevOps Auditor

Name: Infrastructure Review & DevOps Auditor
Author: jayteealao

byjayteealao

0•

部署与 DevOps

Performs comprehensive infrastructure-as-code reviews covering CI/CD pipelines, database migrations, and cloud observability.

The review-infra skill automates the rigorous assessment of infrastructure-as-code and deployment workflows by deploying a specialized senior agent. It systematically evaluates Terraform, Kubernetes, and CI/CD configurations against six comprehensive checklists focused on security, least privilege, and operational clarity. By identifying misconfigurations, migration risks, and observability gaps before deployment, it helps teams minimize their production blast radius and ensure high-availability standards.

主要功能

01Strategic blast radius assessment for identifying production-wide operational risks

02Automated CI/CD pipeline security and deployment safety auditing

03Database migration safety checks including rollback capability assessment

04Logging and observability verification to prevent PII leaks and ensure alertability

050 GitHub stars

06Deep IaC analysis for Terraform, CloudFormation, and Kubernetes manifests

使用场景

01Performing a pre-merge audit of complex cloud infrastructure and IAM changes

02Ensuring database migrations follow zero-downtime best practices

03Validating CI/CD pipelines for secret exposure and deployment guardrails

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jayteealao/aperture review-infra

For use in Claude.ai and ChatGPT

Download Skill