1

    terraform-iac-reviewer

    by Zicheng Liao

    Expert IaC auditing for Terraform and OpenTofu to catch security holes, cost leaks, and state management risks.

    Updated May 2026
    Security scanned
    One-time purchase

    $10

    · or 50 credits

    One-time purchase

    30-day refund guarantee

    Secure checkout via Stripe

    Included in download

    • Audit HCL code for public S3 buckets and unencrypted RDS instances
    • Identify orphaned cloud resources and over-provisioned instance types
    • Includes example output and usage patterns
    • Instant install
    • One-time purchase

    See it in action

    A real example of what this skill takes in and produces.

    Sample output

    CRITICAL: aws_s3_bucket.logs Issue: Public read access enabled. Impact: Sensitive logs exposed to internet. Fix: resource "aws_s3_bucket_public_access_block" "logs" { bucket = aws_s3_bucket.logs.id block_public_acls = true block_public_policy = true }

    WARNING: Use spot instances for 'dev-node'.

    About This Skill

    Senior-Level IaC Auditing for Terraform and OpenTofu

    Infrastructure as Code (IaC) is the backbone of modern cloud deployments, but a single misconfigured S3 bucket or unencrypted database can lead to catastrophic data breaches. This skill transforms your AI agent into a senior-level infrastructure architect that audits HCL configurations for security, cost efficiency, and operational stability across AWS, Azure, and GCP.

    What it does

    The Terraform IaC Reviewer scans your workspace to build a complete resource graph of modules, providers, and variables. Performance is categorized into three key pillars:

    • Security Audit: Detects public exposure, unencrypted volumes, overly permissive IAM wildcards, and hardcoded secrets.
    • Cost Optimization: Identifies over-provisioned instances, orphaned resources like unattached Elastic IPs, and missing lifecycle policies.
    • State & Drift Management: Ensures safe remote backend configurations, state locking to prevent corruption, and versioning for disaster recovery.

    Why use this skill

    While standard AI prompts can catch basic syntax errors, this skill follows a structured multi-step workflow. It doesn't just look at files in isolation; it analyzes provider pinning, module boundaries, and variable validation blocks. It provides specific "Critical," "Warning," and "Suggestion" tiers with drop-in HCL fixes, ensuring your infrastructure is production-grade before you ever run terraform apply.

    Supported Platforms

    • AWS: S3 Bucket Policies, IMDSv2, VPC Flow Logs, and RDS Deletion Protection.
    • Azure: Key Vault Soft Delete, NSG Flow Logs, and Storage Account Secure Transfer.
    • GCP: Uniform Bucket-Level Access, Shielded VMs, and KMS Rotation.

    Use Cases

    • Audit HCL code for public S3 buckets and unencrypted RDS instances
    • Identify orphaned cloud resources and over-provisioned instance types
    • Analyze terraform plan output for accidental resource destruction risks
    • Enforce tagging strategies and naming conventions across cloud providers
    • Verify remote backend and state locking configurations for team safety

    Reviews

    No reviews yet - be the first to share your experience.

    Only users who have downloaded or purchased this skill can leave a review.

    Security Scanned

    Passed automated security review

    Permissions

    No special permissions declared or detected

    Tags

    terraform
    infrastructure-as-code
    aws
    devops
    security
    cloud-optimization

    Creator

    Zicheng Liao

    Frequently Asked Questions

    Learn More About AI Agent Skills

    More Premium Skills

    software-architect

    A structured framework for planning, reviewing, and evolving complex software systems with explicit trade-offs.

    $52 installs

    designing-hybrid-context-layers

    Architects the right retrieval strategy for every query — teaching your agent when to use RAG, a knowledge graph, or a temporal index instead of defaulting to vector search for everything.

    $1012 installs

    consumer-motivation-analyzer

    Go beyond surface-level feedback to uncover the psychological drivers and hidden motivations behind buyer behavior.

    $199 installs

    keyword-research

    Transform URLs or product lists into SEO keyword research packs with Google Ads data and intent-based clustering.

    $77 installs

    $10