Terraform Skill

Use when working with Terraform or OpenTofu - creating modules, writing tests (native test framework, Terratest), setting up CI/CD pipelines, reviewing confi...

This is a documentation-only Terraform/OpenTofu skill and appears coherent with its stated purpose — it does not itself request credentials or install code. Before installing or using it: 1) Verify the skill source (registry metadata lists source as unknown / no homepage); prefer installing from a known GitHub repo or the official marketplace entry. 2) Treat the CI and shell examples as templates: review and adapt them (don’t copy/paste blindly). In particular, inspect any curl | bash installers and cleanup scripts that call the AWS CLI (they can terminate resources). 3) Never paste real secrets into examples; use CI secrets or least-privileged credentials. 4) If you want to run the provided scripts/workflows, run them in isolated test accounts/environments and review the commands first. Overall, the skill is coherent and documentation-focused, but standard caution about executing example scripts applies.

Type: OpenClaw Skill Name: terraform-skill Version: 1.0.0 The terraform-skill bundle is a comprehensive set of instructions and reference materials designed to guide an AI agent in providing Terraform and OpenTofu best practices. The content focuses on modular architecture, testing strategies (native and Terratest), CI/CD integration, and security hardening (e.g., using Trivy and Checkov). While the bundle includes potentially risky code such as CI/CD templates with 'curl|bash' installers and a bash script for automated AWS resource cleanup (references/ci-cd-workflows.md), these are clearly documented within the context of standard DevOps practices and cost optimization. The skill explicitly promotes security by instructing the agent to warn against storing secrets in state files and using wildcard IAM permissions. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.