terraform-patterns

What This Skill Does

The terraform-patterns skill is an opinionated framework designed to elevate your Infrastructure-as-Code (IaC) workflow within OpenClaw. It shifts the burden of managing complex Terraform HCL from manual oversight to automated, consistent, and secure best practices. The skill acts as an intelligent assistant that understands module composition, state lifecycle management, and security posture. It provides specific slash commands—/terraform:review, /terraform:module, and /terraform:security—to ensure your infrastructure remains maintainable, scalable, and resilient against common anti-patterns that often plague DevOps teams. By enforcing structured module design and strict provider versioning, it ensures your infrastructure doesn't just work today, but remains predictable at 3 AM during an incident.

Installation

To install this skill, run the following command in your terminal within your OpenClaw-enabled project:

clawhub install openclaw/skills/skills/alirezarezvani/terraform-patterns

Ensure your development environment has access to the repository provider and the OpenClaw agent is running with appropriate permissions to access the local file system.

Use Cases

• Production Refactoring: Use this when your Terraform code has become a monolithic mess, helping you break logic into clean, reusable modules.
• Security Hardening: Automatically audit existing configurations against industry-standard benchmarks to identify overly permissive IAM roles or unencrypted resources.
• State Migration: Safely move local state to remote backends with locking, or manage complex multi-environment configurations using workspace or directory-based isolation.
• CI/CD Integration: Prepare your Terraform modules for automated pipelines, ensuring they meet the criteria for plan/apply workflows in environments like GitHub Actions or GitLab CI.

Example Prompts

1. "/terraform:review - Analyze my current AWS VPC module for potential security vulnerabilities and suggest improvements for module encapsulation."
2. "/terraform:module - I need to design a generic RDS module that supports multi-AZ deployments with proper encryption and automated backups."
3. "/terraform:security - Audit my current main.tf file; I am concerned about potential secret exposure and hardcoded credentials in my provider block."

Tips & Limitations

• Tip: Always run /terraform:review before a major refactor to establish a baseline of existing resource dependencies.
• Tip: Use sensitive = true in all variable definitions containing secrets; the skill will flag any variable missing this attribute that appears to hold sensitive data.
• Limitation: The skill performs static analysis of your local HCL files. It cannot reach out and inspect the live infrastructure (the real-world state) directly. Always run terraform plan to verify the automated changes before applying them to your production environment.