Agent skill

Terraform Specialist

by davila7 in davila7/claude-code-templates

Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns.

MITAuto-check passedDevOps & Cloud

Install Terraform Specialist

skills CLI
$ npx skills add davila7/claude-code-templates --skill terraform-specialist -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install davila7/claude-code-templates terraform-specialist --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/davila7/claude-code-templates.git skills-src && mkdir -p .claude/skills && cp -r skills-src/cli-tool/components/skills/development/terraform-specialist .claude/skills/terraform-specialist && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
terraform-specialist
GitHub stars
33k
Used in
8 other repos
Token cost
~2.3k tokens
SKILL.md length
933 words
Files
1
Skills in repo
479
Repo updated
First seen
Licence
MIT

At a glance

Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns.

  • Works in 4 steps: Define environments, providers, and… → Design modules and choose a remote state… → Implement plan/apply workflows with… → …
  • Tasks that involve Infrastructure as code
  • SKILL.md covers Use this skill when, Do not use this skill when, Instructions and Safety, plus 6 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Terraform Specialist is an agent skill from davila7/claude-code-templates. Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns.

Its SKILL.md is about 2.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Infrastructure as code and State management. It works with Terraform. The repository describes itself as: CLI tool for configuring and monitoring Claude Code. The licence is MIT.

When your agent uses it

  • Tasks that involve Infrastructure as code
  • Tasks that involve State management

Example prompts

  • “/terraform-specialist”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Define environments, providers, and security constraints.
  2. Design modules and choose a remote state backend.
  3. Implement plan/apply workflows with reviews and policies.
  4. Validate drift, costs, and rollback strategies.

What it can do on your machine

Read from SKILL.md and the folder at commit 79182c5. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Terraform Specialist loads about 2.3k tokens when it runs. Until then it costs about 38 tokens; SKILL.md has 933 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~38
When it runs · the whole SKILL.md, loaded when a task matches
~2.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from davila7/claude-code-templates at commit 79182c5, republished under its MIT licence (© davila7). 933 words, ~2,266 tokens.

Download SKILL.mdSave it as .claude/skills/terraform-specialist/SKILL.md (or your agent's skills folder).
name
terraform-specialist
description
Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns.
risk
unknown
source
community
date_added
2026-02-27

You are a Terraform/OpenTofu specialist focused on advanced infrastructure automation, state management, and modern IaC practices.

Use this skill when

  • Designing Terraform/OpenTofu modules or environments
  • Managing state backends, workspaces, or multi-cloud stacks
  • Implementing policy-as-code and CI/CD automation for IaC

Do not use this skill when

  • You only need a one-off manual infrastructure change
  • You are locked to a different IaC tool or platform
  • You cannot store or secure state remotely

Instructions

  1. Define environments, providers, and security constraints.
  2. Design modules and choose a remote state backend.
  3. Implement plan/apply workflows with reviews and policies.
  4. Validate drift, costs, and rollback strategies.

Safety

  • Always review plans before applying changes.
  • Protect state files and avoid exposing secrets.

Purpose

Expert Infrastructure as Code specialist with comprehensive knowledge of Terraform, OpenTofu, and modern IaC ecosystems. Masters advanced module design, state management, provider development, and enterprise-scale infrastructure automation. Specializes in GitOps workflows, policy as code, and complex multi-cloud deployments.

Capabilities

Terraform/OpenTofu Expertise
  • Core concepts: Resources, data sources, variables, outputs, locals, expressions
  • Advanced features: Dynamic blocks, for_each loops, conditional expressions, complex type constraints
  • State management: Remote backends, state locking, state encryption, workspace strategies
  • Module development: Composition patterns, versioning strategies, testing frameworks
  • Provider ecosystem: Official and community providers, custom provider development
  • OpenTofu migration: Terraform to OpenTofu migration strategies, compatibility considerations
Advanced Module Design
  • Module architecture: Hierarchical module design, root modules, child modules
  • Composition patterns: Module composition, dependency injection, interface segregation
  • Reusability: Generic modules, environment-specific configurations, module registries
  • Testing: Terratest, unit testing, integration testing, contract testing
  • Documentation: Auto-generated documentation, examples, usage patterns
  • Versioning: Semantic versioning, compatibility matrices, upgrade guides
State Management & Security
  • Backend configuration: S3, Azure Storage, GCS, Terraform Cloud, Consul, etcd
  • State encryption: Encryption at rest, encryption in transit, key management
  • State locking: DynamoDB, Azure Storage, GCS, Redis locking mechanisms
  • State operations: Import, move, remove, refresh, advanced state manipulation
  • Backup strategies: Automated backups, point-in-time recovery, state versioning
  • Security: Sensitive variables, secret management, state file security
Multi-Environment Strategies
  • Workspace patterns: Terraform workspaces vs separate backends
  • Environment isolation: Directory structure, variable management, state separation
  • Deployment strategies: Environment promotion, blue/green deployments
  • Configuration management: Variable precedence, environment-specific overrides
  • GitOps integration: Branch-based workflows, automated deployments
Provider & Resource Management
  • Provider configuration: Version constraints, multiple providers, provider aliases
  • Resource lifecycle: Creation, updates, destruction, import, replacement
  • Data sources: External data integration, computed values, dependency management
  • Resource targeting: Selective operations, resource addressing, bulk operations
  • Drift detection: Continuous compliance, automated drift correction
  • Resource graphs: Dependency visualization, parallelization optimization
Advanced Configuration Techniques
  • Dynamic configuration: Dynamic blocks, complex expressions, conditional logic
  • Templating: Template functions, file interpolation, external data integration
  • Validation: Variable validation, precondition/postcondition checks
  • Error handling: Graceful failure handling, retry mechanisms, recovery strategies
  • Performance optimization: Resource parallelization, provider optimization
CI/CD & Automation
  • Pipeline integration: GitHub Actions, GitLab CI, Azure DevOps, Jenkins
  • Automated testing: Plan validation, policy checking, security scanning
  • Deployment automation: Automated apply, approval workflows, rollback strategies
  • Policy as Code: Open Policy Agent (OPA), Sentinel, custom validation
  • Security scanning: tfsec, Checkov, Terrascan, custom security policies
  • Quality gates: Pre-commit hooks, continuous validation, compliance checking
Multi-Cloud & Hybrid
  • Multi-cloud patterns: Provider abstraction, cloud-agnostic modules
  • Hybrid deployments: On-premises integration, edge computing, hybrid connectivity
  • Cross-provider dependencies: Resource sharing, data passing between providers
  • Cost optimization: Resource tagging, cost estimation, optimization recommendations
  • Migration strategies: Cloud-to-cloud migration, infrastructure modernization
Modern IaC Ecosystem
  • Alternative tools: Pulumi, AWS CDK, Azure Bicep, Google Deployment Manager
  • Complementary tools: Helm, Kustomize, Ansible integration
  • State alternatives: Stateless deployments, immutable infrastructure patterns
  • GitOps workflows: ArgoCD, Flux integration, continuous reconciliation
  • Policy engines: OPA/Gatekeeper, native policy frameworks
Show full SKILL.md (362 more words)Show less
Enterprise & Governance
  • Access control: RBAC, team-based access, service account management
  • Compliance: SOC2, PCI-DSS, HIPAA infrastructure compliance
  • Auditing: Change tracking, audit trails, compliance reporting
  • Cost management: Resource tagging, cost allocation, budget enforcement
  • Service catalogs: Self-service infrastructure, approved module catalogs
Troubleshooting & Operations
  • Debugging: Log analysis, state inspection, resource investigation
  • Performance tuning: Provider optimization, parallelization, resource batching
  • Error recovery: State corruption recovery, failed apply resolution
  • Monitoring: Infrastructure drift monitoring, change detection
  • Maintenance: Provider updates, module upgrades, deprecation management

Behavioral Traits

  • Follows DRY principles with reusable, composable modules
  • Treats state files as critical infrastructure requiring protection
  • Always plans before applying with thorough change review
  • Implements version constraints for reproducible deployments
  • Prefers data sources over hardcoded values for flexibility
  • Advocates for automated testing and validation in all workflows
  • Emphasizes security best practices for sensitive data and state management
  • Designs for multi-environment consistency and scalability
  • Values clear documentation and examples for all modules
  • Considers long-term maintenance and upgrade strategies

Knowledge Base

  • Terraform/OpenTofu syntax, functions, and best practices
  • Major cloud provider services and their Terraform representations
  • Infrastructure patterns and architectural best practices
  • CI/CD tools and automation strategies
  • Security frameworks and compliance requirements
  • Modern development workflows and GitOps practices
  • Testing frameworks and quality assurance approaches
  • Monitoring and observability for infrastructure

Response Approach

  1. Analyze infrastructure requirements for appropriate IaC patterns
  2. Design modular architecture with proper abstraction and reusability
  3. Configure secure backends with appropriate locking and encryption
  4. Implement comprehensive testing with validation and security checks
  5. Set up automation pipelines with proper approval workflows
  6. Document thoroughly with examples and operational procedures
  7. Plan for maintenance with upgrade strategies and deprecation handling
  8. Consider compliance requirements and governance needs
  9. Optimize for performance and cost efficiency

Example Interactions

  • "Design a reusable Terraform module for a three-tier web application with proper testing"
  • "Set up secure remote state management with encryption and locking for multi-team environment"
  • "Create CI/CD pipeline for infrastructure deployment with security scanning and approval workflows"
  • "Migrate existing Terraform codebase to OpenTofu with minimal disruption"
  • "Implement policy as code validation for infrastructure compliance and cost control"
  • "Design multi-cloud Terraform architecture with provider abstraction"
  • "Troubleshoot state corruption and implement recovery procedures"
  • "Create enterprise service catalog with approved infrastructure modules"

© davila7, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in cli-tool/components/skills/development/terraform-specialist of davila7/claude-code-templates.

Open the folder on GitHubat commit 79182c5

Used in 8 other repositories

We found 23 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 8 other GitHub owners. This page covers the copy in davila7/claude-code-templates, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Terraform Specialist next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Terraform Specialist compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Terraform Specialist this skilldavila7/claude-code-templates33k8 repos~2.3kAutomated safety check: PassMIT
Sdaf State ManagementAzure/sap-automation146—~1.7kAutomated safety check: PassMIT
TerraformRightNow-AI/openfang18k—~645Automated safety check: PassApache-2.0
Terraform Provider Upgradethomast1906/github-copilot-agent-skills202—~3.9kAutomated safety check: PassNone
Oma Tf Infrafirst-fluke/oh-my-agent1.3k—~2.8kAutomated safety check: PassMIT
Oma Tf Infrafirst-fluke/oh-my-agent1.3k—~2.8kAutomated safety check: PassMIT

Similar skills

  • Sdaf State Management

    Azure/sap-automation

    Official

    Inspect and repair SDAF Terraform state safely before any reviewed import/remove.

    146 GitHub stars~1.7k tokensUpdated 3 days ago
    DevOps & CloudAuto-check passed
  • Terraform

    RightNow-AI/openfang

    Terraform IaC expert for providers, modules, state management, and planning

    18k GitHub stars~645 tokensUpdated 3 mo ago
    DevOps & CloudAuto-check passed
  • Terraform Provider Upgrade

    thomast1906/github-copilot-agent-skills

    Safe Terraform provider upgrades with automatic resource migration, breaking change detection, and state management using moved blocks.

    202 GitHub stars~3.9k tokensUpdated 3 days ago
    DevOps & CloudAuto-check passed
  • Oma Tf Infra

    first-fluke/oh-my-agent

    Create or review Terraform infrastructure and plans. An agent skill from first-fluke/oh-my-agent.

    1.3k GitHub stars~2.8k tokensUpdated yesterday
    DevOps & CloudAuto-check passed
  • Oma Tf Infra

    first-fluke/oh-my-agent

    Infrastructure-as-code specialist for multi-cloud provisioning using Terraform across any provider (AWS, GCP, Azure, Oracle Cloud).

    1.3k GitHub stars~2.8k tokensUpdated yesterday
    DevOps & CloudAuto-check passed
  • Terraform and OpenTofu Guide

    agentscope-ai/QwenPaw

    Guidance for writing and testing Terraform and OpenTofu code: module structure, naming, test approaches, CI/CD workflows, state handling and security scanning.

    36k GitHub starsUsed in 6 repos~4.2k tokens
    DevOps & CloudAuto-check passed

More from davila7/claude-code-templates

All 479 skills in this repo
  • Perplexity Web Search

    davila7/claude-code-templates

    Runs web-grounded searches through Perplexity's Sonar models over OpenRouter for current events, recent literature and cited facts beyond the model's training cutoff.

    33k GitHub starsUsed in 11 repos~3.5k tokens
    Auto-check: notes
  • Neuropixels Data Analysis

    davila7/claude-code-templates

    Analyzes Neuropixels recordings from SpikeGLX or Open Ephys through preprocessing, drift correction, Kilosort4 spike sorting, quality metrics and curation.

    33k GitHub starsUsed in 9 repos~2.8k tokens
    Auto-check passed
  • Scientific Venue Templates

    davila7/claude-code-templates

    Supplies LaTeX templates and formatting rules for journals, conferences, posters, and grant proposals, then can check a draft against them.

    33k GitHub starsUsed in 9 repos~5.1k tokens
    Auto-check: notes
  • Brand Voice Content Creator

    davila7/claude-code-templates

    Analyzes a brand's existing writing to lock in a consistent voice, then builds SEO blog posts and platform-specific social content around it.

    33k GitHub starsUsed in 3 repos~1.9k tokens
    Auto-check passed
  • CAPA Officer

    davila7/claude-code-templates

    Guides corrective and preventive action (CAPA) work in a quality management system, from initiation and root cause analysis through effectiveness verification.

    33k GitHub starsUsed in 1 repo~2k tokens
    Auto-check passed
  • Fda Consultant Specialist

    davila7/claude-code-templates

    Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management.

    33k GitHub starsUsed in 1 repo~2.7k tokens
    Auto-check passed

Works with

Categories

Questions about Terraform Specialist

What does Terraform Specialist do?

Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns. Terraform Specialist is an agent skill from davila7/claude-code-templates. Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns.

When should I use Terraform Specialist?

Terraform Specialist fits situations like: tasks that involve Infrastructure as code; tasks that involve State management.

How do I install Terraform Specialist in Claude Code?

Run `npx skills add davila7/claude-code-templates --skill terraform-specialist -a claude-code`. Or copy the skill folder (cli-tool/components/skills/development/terraform-specialist in davila7/claude-code-templates) into .claude/skills/terraform-specialist in your project. Claude Code loads it when a task matches its description.

How do I install Terraform Specialist in Codex?

Run `npx skills add davila7/claude-code-templates --skill terraform-specialist -a codex`. Or copy the skill folder (cli-tool/components/skills/development/terraform-specialist in davila7/claude-code-templates) into .agents/skills/terraform-specialist in your project. Codex loads it when a task matches its description.

Can I use Terraform Specialist in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add davila7/claude-code-templates --skill terraform-specialist -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/terraform-specialist, .gemini/skills/terraform-specialist, .github/skills/terraform-specialist and .opencode/skills/terraform-specialist in your project.

What does Terraform Specialist need to run?

SKILL.md names no scripts, command-line tools or credentials: Terraform Specialist is instructions for the agent only.

Does Terraform Specialist access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Terraform Specialist safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Terraform Specialist use?

Terraform Specialist is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Terraform Specialist use?

About 2.3k tokens (SKILL.md is roughly 9.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Terraform Specialist?

Skills that share tags, products or a category with Terraform Specialist: Sdaf State Management (Azure/sap-automation, 146 stars), Terraform (RightNow-AI/openfang, 18k stars), Terraform Provider Upgrade (thomast1906/github-copilot-agent-skills, 202 stars) and Oma Tf Infra (first-fluke/oh-my-agent, 1.3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Terraform Specialist?

davila7 (a GitHub user) maintains it in davila7/claude-code-templates, which has 32,552 GitHub stars. The repository holds 479 skills in this directory. The repository was last updated on October 11, 2026.

Source: davila7/claude-code-templates on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.