The Agent Skills Directory

[SAFE]: The skill provides structured guidance and diagnostic tools for managing Terraform infrastructure, focusing on security hardening and module quality.
[COMMAND_EXECUTION]: The skill invokes local Python scripts (tf_module_analyzer.py and tf_security_scanner.py) to perform static analysis on user-supplied Terraform files. These scripts utilize regular expressions to detect infrastructure anti-patterns, such as hardcoded credentials (e.g., AWS access keys), permissive IAM policies (e.g., Resource = '*'), and open security group rules (e.g., SSH port 22 open to 0.0.0.0/0).
[EXTERNAL_DOWNLOADS]: The skill's documentation references the author's GitHub repository (github.com/alirezarezvani/claude-skills.git) for installation. This is a legitimate distribution channel for the vendor's resources and is documented neutrally as a safe distribution method.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided .tf files for analysis, creating an ingestion surface for potentially malicious data. However, the analysis tools are restricted to static code scanning and reporting, with no dangerous execution capabilities or network operations triggered by the content of the analyzed files.

terraform-patterns