From terraform-iac
Design safe remote Terraform/OpenTofu state: remote backend with locking, encryption, and versioning; isolate state by blast radius; keep secrets out (and treat the whole file as sensitive); and do state surgery only with a snapshot.
How this skill is triggered — by the user, by Claude, or both
Slash command
/terraform-iac:terraform-state-safetyThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
**Remote + locked + encrypted + versioned.** Locking stops concurrent-apply corruption; encryption protects the secrets state captures; versioning enables recovery.
Remote + locked + encrypted + versioned. Locking stops concurrent-apply corruption; encryption protects the secrets state captures; versioning enables recovery.
Network / data / app in separate states — a risky app apply can't touch the VPC. One giant state = one giant blast radius.
Mark sensitive + source from a manager. Providers still write some values to state, so treat the whole file as sensitive (encrypt + restrict access).
import / state mv / state rm: snapshot first, one op, verify with a plan.
npx claudepluginhub mcorbett51090/ravenclaude --plugin terraform-iacGuides completion of development work by verifying tests, detecting environment, and presenting structured options for merge, PR, or cleanup.
Enforces test-driven development: write failing test first, then minimal code to pass. Use when implementing features or bugfixes.
Guides creation and editing of skills using test-driven development with pressure scenarios and subagents to verify agent compliance.