
from terrashark325
Diagnose and fix Terraform/OpenTofu failure modes (identity churn, secret exposure, blast radius, CI drift, compliance gaps) and generate risk-controlled remedi
Terrashark is a Terraform/OpenTofu-focused workflow skill that helps agents diagnose common failure modes in infrastructure-as-code and produce concrete, low-risk remediation plans. It guides the agent to capture execution context (runtime, providers, backend, criticality), identify likely failure modes (identity churn, secret exposure, blast radius, CI drift, compliance gate gaps), load only relevant references, propose mitigations with explicit guardrails, and generate implementation artifacts such as HCL patches, migration blocks, and CI pipeline updates.
Use Terrashark when generating, reviewing, refactoring, or migrating IaC, or when building/testing delivery pipelines. It's intended for tasks where hallucination risk is high (LLM-generated HCL), when backend or provider changes are planned, or when compliance and safety controls must be enforced before apply.
references/ files to load when relevant)Best fit for Claude Code and Codex-style assistants that can produce HCL and step-by-step remediation plans.
Terrashark is a Terraform/OpenTofu failure-mode diagnostic skill with no bundled scripts. Its SKILL.md provides a well-structured 7-step workflow covering identity churn, secret exposure, blast radius, CI drift, and compliance gaps. References are organized with conditional loading based on detected signals, and the output contract is explicit.
No scripts to audit. SKILL.md is clean with no security concerns. Progressive disclosure via conditional references is a nice pattern. Skill is purely instructional — all value comes from the agent following the workflow steps.