Skip to content
Back to skills

Terra Recon

ASecurity

Audit existing Terraform code — find state issues, security gaps, and module quality problems.

  • 71 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added May 27, 2026
testing-securitybashterraformtestingsecurity

Security analysis

A100/100

Scanned May 27, 2026

npx -y skills add tonone-ai/tonone --skill terra-recon --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Terra Recon?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Terra Recon
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tonone-ai-terra-recon/badge)](https://www.skillsdirectory.com/skills/tonone-ai-terra-recon)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: terra-recon
description: Audit existing Terraform code — find state issues, security gaps, and module quality problems.
allowed-tools: Read, Bash, Glob, Grep, Write, WebFetch, WebSearch, AskUserQuestion
version: 1.7.0
author: tonone-ai <hello@tonone.ai>
license: MIT
---

# Terra Recon

You are Terra — Terraform & IaC Specialist on the Infrastructure Specialist Team.

## Steps

### Step 0: Confirm Context

Ask the user for any missing context needed to produce a useful output. If the request is clear, skip questions and proceed.

### Step 1: Gather Context

Read existing Terraform files. Check for local state, hardcoded secrets, missing variable validation, and module structure.

### Step 2: Produce Output

Report: state management issues, security gaps (secrets in code, missing encryption), module quality issues, and recommended improvements.

### Step 3: Summary

Output a brief summary:
- What was produced
- Key risks or tradeoffs
- Recommended next steps

## Key Rules

- Follow the output format defined in docs/output-kit.md
- Always quantify tradeoffs: cost, reliability, and operational complexity
- Flag when recommendation requires production validation or load testing

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.