terraform-ai-skills
Use when bulk-managing Terraform modules at scale — upgrading providers across AWS, GCP, Azure, or DigitalOcean repositories, standardizing GitHub Actions workflows, automating semantic releases, running security scans, or performing end-to-end maintenance cycles across 10–200+ module repositories
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/anmolnagpal/terraform-ai-skillsWhat This Skill Does
The terraform-ai-skills agent is a specialized automation tool designed for enterprise-scale management of Terraform module repositories. It abstracts the complexity of maintaining dozens to hundreds of infrastructure-as-code modules by standardizing provider versions, fixing CI/CD workflows, and automating semantic versioning. By leveraging pre-configured operational prompts and cloud-specific configurations, the agent transforms multi-day manual maintenance tasks—such as updating AWS provider constraints or rotating GitHub Action secrets—into streamlined, automated cycles. It is built to ensure consistent infrastructure security and governance across hybrid and multi-cloud environments, including AWS, GCP, Azure, and DigitalOcean.
Installation
To integrate this agent into your workflow, ensure you have the OpenClaw CLI configured, then execute the following command in your terminal:
clawhub install openclaw/skills/skills/anmolnagpal/terraform-ai-skills
Once installed, you can trigger the agent using @copilot within your supported IDE or command interface. Ensure your environment has the necessary Git and GitHub CLI (gh) permissions to read and write to your infrastructure repositories.
Use Cases
This skill is engineered for DevOps engineers, SREs, and Platform teams managing large-scale infrastructure footprints. Common scenarios include:
- Bulk Provider Upgrades: Automatically bumping provider versions across 100+ repos while updating associated local module examples.
- CI/CD Standardization: Enforcing unified GitHub Actions workflows across an entire organization by pinning action SHAs and removing legacy workflows.
- Security Hardening: Running bulk security scans using TFLint, TFSec, and Checkov to identify misconfigurations across all managed modules.
- Automated Release Management: Generating standardized changelogs and semantic versions based on commit history for entire module libraries.
Example Prompts
- "@copilot use terraform-ai-skills/config/aws.config and initiate a bulk provider upgrade across all repositories in the infra-modules organization to version 5.80.0."
- "@copilot use terraform-ai-skills/config/gcp.config and follow terraform-ai-skills/prompts/2-workflow-standardization.prompt to standardize all GCP module workflows."
- "@copilot use terraform-ai-skills/config/azure.config and run a security scan using Checkov across all modules; report only critical findings."
Tips & Limitations
- Safety First: Always execute the skill on a single pilot repository before running it across your entire fleet. Verify changes locally with
git status. - Scope: This tool is not intended for authoring individual Terraform resources; it is strictly a maintenance and governance tool.
- Versioning: Always consult the Cloud Provider Support table in the documentation to ensure your Terraform version meets the minimum requirements for the skill's specific configuration files.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-anmolnagpal-terraform-ai-skills": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: file-read, file-write, code-execution, external-api
Related Skills
aws-compliance-analyzer
Map AWS environment against CIS, SOC 2, HIPAA, or PCI-DSS controls with prioritized remediation
aws-terraform-security-reviewer
Review Terraform plans and HCL files for AWS security misconfigurations before deployment
azure-storage-exposure-auditor
Identify publicly accessible Azure Storage accounts and misconfigured blob containers
aws-tagging-auditor
Audit AWS resource tagging compliance and identify unallocatable spend for FinOps teams
gcp-bigquery-optimizer
Analyze BigQuery query patterns and storage to dramatically reduce the