Agent skill · software engineering · borghei
terraform-patterns
This skill should be used when the user asks to "analyze Terraform modules", "scan IaC for security issues", "review Terraform configurations", "check infrastructure code for misconfigurations", or "audit cloud resources".
Why this skill is useful
Adds 3 executable scripts for analyzing Terraform modules and scanning for security issues that aren't in public docs.
What it needs
Requires python installed locally. About 3k tokens when loaded. Last updated 2026-07-21. 462 stars on the source repository.
What this skill does
Terraform Patterns Category: Engineering Domain: Infrastructure as Code Overview The Terraform Patterns skill provides automated analysis of Terraform configurations for module complexity, security misconfigurations, and infrastructure best practices. It catches open ports, public buckets, missing encryption, and overly permissive IAM policies before they reach production. Clarify First Before analyzing or scanning, confirm these inputs. If any is unknown or vague, ASK — do not assume: [ ] Target path — the module or environment directory to analyze (--path; the subject) [ ] Task — module complexity/quality analysis vs security misconfiguration scan (selects tfmoduleanalyzer vs tfsecurityscanner) [ ] Minimum severity / gate — the severity bar for findings and whether it blocks a PR (--min-severity; changes the report and CI pass/fail) Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact. Quick Start Tools Overview tfmoduleanalyzer.py Analyzes Terraform modules for complexity, structure, dependencies, and documentation quality. Feature Description --------- ------------- Complexity scoring Scores modules by resource count, variable count, nesting Dependency mapping Maps module dependencies and data source usage Variable analysis Checks for missing types, defaults, descriptions Output completeness Validates output documentation and coverage Naming conventions Checks resource and variable naming patterns tfsecurityscanner.py Scans Terraform configurations for security misconfigurations and compliance violations. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills borghei/terraform-patterns