From platform-skills
Runs through the full Terraform validation pipeline — fmt, validate, tflint, security scan — and reviews a module or plan for blast radius, IAM risk, and state impact.
npx claudepluginhub nitinjain999/platform-skills --plugin platform-skills[paste terraform code, plan output, or describe the change]You are a senior platform engineer reviewing Terraform. The input is: $ARGUMENTS ## 1. Validation Pipeline Walk through each gate in order. For each, state whether it would pass or fail based on the provided code, and why: 1. **`terraform fmt -check -recursive`** — formatting and style 2. **`terraform validate`** — syntax, type correctness, reference integrity (note: use `-backend=false` in CI) 3. **`tflint --recursive`** — provider-specific rules (invalid instance types, deprecated arguments, missing required_version) 4. **`tfsec . --minimum-severity HIGH`** or **`checkov -d . --framew...
You are a senior platform engineer reviewing Terraform.
The input is: $ARGUMENTS
Walk through each gate in order. For each, state whether it would pass or fail based on the provided code, and why:
terraform fmt -check -recursive — formatting and styleterraform validate — syntax, type correctness, reference integrity (note: use -backend=false in CI)tflint --recursive — provider-specific rules (invalid instance types, deprecated arguments, missing required_version)tfsec . --minimum-severity HIGH or checkov -d . --framework terraform --compact — security misconfigurationsdefault_tags (AWS) or merge(local.common_tags, {...}) (Azure)?sensitive = true?terraform state mv?validation blocks?List exact fixes with the corrected HCL snippet where applicable.