Official agent skill

Review Schema

by hashicorp in hashicorp/terraform-provider-aws

Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive…

OfficialMPL-2.0Auto-check passedDevOps & Cloud

Install Review Schema

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-schema -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-schema --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/review-schema .claude/skills/review-schema && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "review-schema" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema into .claude/skills/review-schema/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-schema", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-schema -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-schema --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/review-schema .agents/skills/review-schema && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "review-schema" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema into .agents/skills/review-schema/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-schema", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-schema -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-schema --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/review-schema .cursor/skills/review-schema && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "review-schema" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema into .cursor/skills/review-schema/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-schema", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/hashicorp/terraform-provider-aws.git --path .agents/skills/review-schema

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-schema -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-schema --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/review-schema .gemini/skills/review-schema && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "review-schema" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema into .gemini/skills/review-schema/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-schema", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-schema

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-schema -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/review-schema .github/skills/review-schema && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "review-schema" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema into .github/skills/review-schema/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-schema", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add hashicorp/terraform-provider-aws --skill review-schema -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install hashicorp/terraform-provider-aws review-schema --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/hashicorp/terraform-provider-aws.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/review-schema .opencode/skills/review-schema && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "review-schema" agent skill from https://github.com/hashicorp/terraform-provider-aws/tree/main/.agents/skills/review-schema into .opencode/skills/review-schema/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-schema", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: review-schema
GitHub stars: 11k
Token cost: ~1k tokens
SKILL.md length: 377 words
Files: 1
Skills in repo: 17
Repo updated: Oct 9, 2026
First seen: Oct 8, 2026
Licence: MPL-2.0

At a glance

Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive…

Reviewing a PR that changes resource
SKILL.md covers Model struct, Attribute rules, Plan modifiers (no ForceNew) and Validators replace…, plus 3 more sections
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
Data-source schema in internal/service//.go

What it does

Review Schema is an agent skill from hashicorp/terraform-provider-aws, published by the product's own GitHub organization. Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive attributes, and timeouts. Use when reviewing a PR that changes resource or data-source schema in internal/service//.go.

Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in DevOps & Cloud, covering Infrastructure as code. It works with Terraform and Amazon Web Services. The repository describes itself as: The AWS Provider enables Terraform to manage AWS resources. The licence is MPL-2.0.

When your agent uses it

Reviewing a PR that changes resource
Data-source schema in internal/service//.go

Example prompts

“/review-schema”

What it can do on your machine

Read from SKILL.md and the folder at commit 64d3359. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are go).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Review Schema loads about 1k tokens when it runs. Until then it costs about 83 tokens; SKILL.md has 377 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~83
When it runs · the whole SKILL.md, loaded when a task matches: ~1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from hashicorp/terraform-provider-aws at commit 64d3359, republished under its MPL-2.0 licence (© hashicorp). 377 words, ~1,029 tokens.

Download SKILL.mdSave it as .claude/skills/review-schema/SKILL.md (or your agent's skills folder).

name: review-schema
description: Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive attributes, and timeouts. Use when reviewing a PR that changes resource or data-source schema in internal/service/**/*.go.

<!-- Copyright IBM Corp. 2014, 2026 -->

<!-- SPDX-License-Identifier: MPL-2.0 -->

Review: Schema & Resource Shape

Assume the @maintainer persona. Scope: model struct, attributes, blocks, validators, plan modifiers, timeouts on non-test resource code. Loaded from review-pr.

Model struct

type fooResourceModel struct {
    framework.WithRegionModel  // first field; omit for global services only
    // attributes...
    Timeouts timeouts.Value `tfsdk:"timeouts"` // only when a timeouts block is present
}

framework.WithRegionModel is the first embedded field for regional resources/data sources/list resources. Global services (CloudFront, IAM, Route 53 hosted zones, etc.) omit it and register with inttypes.ResourceRegionDisabled().
tfsdk tags must match schema attribute names exactly (snake_case).
Use Plugin Framework types (types.String, etc.) and fwtypes.ListNestedObjectValueOf[T] for nested blocks.
Time fields use timetypes.RFC3339, never types.String.

Attribute rules

Attribute names are snake_case.
Alphabetize within Attributes and within Blocks. No blank lines between attributes.
Use internal/names constants (names.AttrARN, names.AttrName, names.AttrTags, names.AttrTagsAll, names.AttrTimeouts, etc.) instead of string literals when one exists.

Required / Optional / Computed

Only four valid combinations. Flag any other.

Required	Optional	Computed	When
✓			User must supply
	✓		User may supply; never use `Default` here
		✓	Read-only
	✓	✓	User or provider supplies; required pairing for `Default`

Prefer Optional + Computed over Optional + Default when AWS supplies a server-side default.

`id` attribute

Plugin Framework does not require an id attribute. Include names.AttrID: framework.IDAttribute() only when the AWS API returns an Id field. Flag schemas that include it on ARN-identified resources just by habit.

Plan modifiers (no `ForceNew`)

Plugin Framework uses plan modifiers, not ForceNew. Flag any new Framework code that mentions ForceNew.

stringplanmodifier.RequiresReplace() — replaces ForceNew: true
stringplanmodifier.UseStateForUnknown() — keeps a computed value stable across plans

Show full SKILL.md (157 more words)Show less

Validators replace `MaxItems`/`MinItems`

Use listvalidator.SizeAtMost(N) / SizeAtLeast(N) (and setvalidator equivalents) on the block, not MaxItems/MinItems on the attribute. For a single nested object, combine listvalidator.SizeAtMost(1) with a list nested block.

Nested blocks need a custom type

schema.ListNestedBlock requires CustomType: fwtypes.NewListNestedObjectTypeOf[complexArgumentModel](ctx). The model field is fwtypes.ListNestedObjectValueOf[complexArgumentModel]. Flag nested blocks that omit CustomType.

For sets of strings, use CustomType: fwtypes.SetOfStringType with fwtypes.SetValueOf[types.String].

For AWS API map blocks, the provider schema has no map-of-objects type — use MapBlockKey. Flag attempts to model AWS map blocks with schema.MapAttribute.

Sensitive attributes

Mark credentials, tokens, and write-only secrets Sensitive: true. Flag computed or required attributes that obviously hold secret material but aren't marked sensitive.

Timeouts

Resources with configurable timeouts use timeouts.Block(ctx, timeouts.Opts{Create: true, Update: true, Delete: true}) and set defaults via r.SetDefaultCreateTimeout / SetDefaultUpdateTimeout / SetDefaultDeleteTimeout that reflect AWS API behavior — RDS Create can take 30–60 minutes; an EC2 SG takes seconds. Don't use arbitrary round numbers. Data sources and list resources do not expose configurable timeouts.

Files

Just SKILL.md in .agents/skills/review-schema of hashicorp/terraform-provider-aws.

Open the folder on GitHubat commit 64d3359

Compare with similar skills

Review Schema next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Review Schema compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Review Schema this skillhashicorp/terraform-provider-aws	11k	—	~1k	Automated safety check: Pass	MPL-2.0	today
Senior DevOps Toolkitmaslennikov-ig/claude-code-orchestrator-kit	260	6 repos	~1.1k	Automated safety check: Notes	Custom licence	7 mo ago
Terravision Cloud Diagramspatrickchugh/terravision	1.6k	—	~5.6k	Automated safety check: Notes	AGPL-3.0-only	2 days ago
TerrasharkLukasNiessen/terrashark	715	—	~843	Automated safety check: Pass	MIT	6 days ago
AWS Cloud Advisortech-leads-club/agent-skills	7k	—	~2.1k	Automated safety check: Pass	CC-BY-4.0	today
Spa Create Configsplunk/splunk-platform-automator	138	—	~3.5k	Automated safety check: Pass	Proprietary	3 days ago

Similar skills

Senior DevOps Toolkit
maslennikov-ig/claude-code-orchestrator-kit
Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…
260 GitHub starsUsed in 6 repos~1.1k tokens
DevOps & CloudAuto-check: notes
Terravision Cloud Diagrams
patrickchugh/terravision
Draw cloud architecture diagrams for AWS, Azure or GCP with the official provider icon sets, using TerraVision.
1.6k GitHub stars~5.6k tokensUpdated 2 days ago
DevOps & CloudAuto-check: notes
Terrashark
LukasNiessen/terrashark
Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps.
715 GitHub stars~843 tokensUpdated 6 days ago
DevOps & CloudAuto-check passed
AWS Cloud Advisor
tech-leads-club/agent-skills
Answers AWS architecture, security and service-selection questions by searching AWS documentation through MCP tools first, then adapting advice to your stack and team.
7k GitHub stars~2.1k tokensUpdated today
DevOps & CloudAuto-check passed
Spa Create Config
splunk/splunk-platform-automator
A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for…
138 GitHub stars~3.5k tokensUpdated 3 days ago
DevOps & CloudAuto-check passed
Provider Verification
mondoohq/mql
Verify mql provider resource/field changes against real cloud infrastructure.
412 GitHub stars~3.7k tokensUpdated today
DevOps & CloudAuto-check passed

More from hashicorp/terraform-provider-aws

All 17 skills in this repo

Review Docs
hashicorp/terraform-provider-aws
Official
Review a Terraform AWS Provider PR's end-user documentation (website/docs//.markdown): whether docs are needed, description openings, argument/attribute style, section structure, tags wording, code…
11k GitHub stars~1.3k tokensUpdated today
Auto-check passed
Review Helpers
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider helper code: finders, status functions, waiters, sweepers, data sources, and list resources.
11k GitHub stars~978 tokensUpdated today
Auto-check passed
Review Identity
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider Resource Identity: the identity-strategy annotations (@ArnIdentity, @SingletonIdentity, @IdentityAttribute), multi-attribute @ImportIDHandler parsers, and region…
11k GitHub stars~692 tokensUpdated today
Auto-check passed
Review Lifecycle
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider resource lifecycle: CRUD step order, smerr/smarterr error handling, and AutoFlex model-to-SDK conversion.
11k GitHub stars~990 tokensUpdated today
Auto-check passed
Review Tags
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider tagging: the tags/tagsall schema attributes, the @Tags(identifierAttribute=...) annotation, and wiring input.Tags = getTagsIn(ctx) after flex.Expand.
11k GitHub stars~462 tokensUpdated today
Auto-check passed
Review Tests
hashicorp/terraform-provider-aws
Official
Review Terraform AWS Provider acceptance and unit test basics: required basic and disappears tests, TestAcc naming, TestCase essentials (PreCheck/ErrorCheck/ProtoV5ProviderFactories/CheckDestroy)…
11k GitHub stars~908 tokensUpdated today
Auto-check passed

Works with

Questions about Review Schema

What does Review Schema do?

Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive…. Review Schema is an agent skill from hashicorp/terraform-provider-aws, published by the product's own GitHub organization. Review Terraform AWS Provider Plugin Framework schema shape: model structs, Required/Optional/Computed combinations, plan modifiers (no ForceNew), nested-block custom types, validators, sensitive attributes, and timeouts.

When should I use Review Schema?

Review Schema fits situations like: reviewing a PR that changes resource; data-source schema in internal/service//.go.

How do I install Review Schema in Claude Code?

Run `npx skills add hashicorp/terraform-provider-aws --skill review-schema -a claude-code`. Or copy the skill folder (.agents/skills/review-schema in hashicorp/terraform-provider-aws) into .claude/skills/review-schema in your project. Claude Code loads it when a task matches its description.

How do I install Review Schema in Codex?

Run `npx skills add hashicorp/terraform-provider-aws --skill review-schema -a codex`. Or copy the skill folder (.agents/skills/review-schema in hashicorp/terraform-provider-aws) into .agents/skills/review-schema in your project. Codex loads it when a task matches its description.

Can I use Review Schema in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add hashicorp/terraform-provider-aws --skill review-schema -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/review-schema, .gemini/skills/review-schema, .github/skills/review-schema and .opencode/skills/review-schema in your project.

What does Review Schema need to run?

SKILL.md names no scripts, command-line tools or credentials: Review Schema is instructions for the agent only.

Does Review Schema access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Review Schema safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Review Schema use?

Review Schema is published under the MPL-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Review Schema use?

About 1k tokens (SKILL.md is roughly 4.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Review Schema?

Skills that share tags, products or a category with Review Schema: Senior DevOps Toolkit (maslennikov-ig/claude-code-orchestrator-kit, 260 stars), Terravision Cloud Diagrams (patrickchugh/terravision, 1.6k stars), Terrashark (LukasNiessen/terrashark, 715 stars) and AWS Cloud Advisor (tech-leads-club/agent-skills, 7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Review Schema?

hashicorp (a GitHub organization, an official publisher) maintains it in hashicorp/terraform-provider-aws, which has 11,111 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 9, 2026.

Source: hashicorp/terraform-provider-aws on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Review Schema

Facts

At a glance

What it does

When your agent uses it

Example prompts

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Review: Schema & Resource Shape

Model struct

Attribute rules

Required / Optional / Computed

id attribute

Plan modifiers (no ForceNew)

Validators replace MaxItems/MinItems

Nested blocks need a custom type

Sensitive attributes

Timeouts

Files

Compare with similar skills

Similar skills

More from hashicorp/terraform-provider-aws

Related

Questions about Review Schema

`id` attribute

Plan modifiers (no `ForceNew`)

Validators replace `MaxItems`/`MinItems`