SKILL.md
Terraform Infrastructure Skill
Overview
Provides 90%+ context savings vs raw Terraform MCP server. Includes critical safety controls for infrastructure operations.
Requirements
- Terraform CLI (v1.0+)
- Cloud provider credentials configured
- Working directory with .tf files
Tools (Progressive Disclosure)
Planning & Validation
| Tool |
Description |
Confirmation |
| plan |
Generate terraform plan |
No |
| validate |
Validate configuration |
No |
| fmt |
Format terraform files |
No |
State Operations
| Tool |
Description |
Confirmation |
| show |
Display current state |
No |
| list |
List state resources |
No |
| state-mv |
Move resource in state |
Yes |
Workspace Operations
| Tool |
Description |
Confirmation |
| workspace-list |
List workspaces |
No |
| workspace-select |
Select workspace |
No |
| workspace-new |
Create workspace |
Yes |
Execution (⚠️ Dangerous)
| Tool |
Description |
Confirmation |
| apply |
Apply changes |
REQUIRED |
Blocked Operations
| Tool |
Status |
| destroy |
BLOCKED |
| state-rm |
BLOCKED |
Quick Reference
# Initialize
terraform init
# Plan changes
terraform plan -out=tfplan
# Validate
terraform validate
# Apply (requires -auto-approve for automation)
terraform apply tfplan
Configuration
- Working directory: Must contain terraform files
- TFVAR\*: Variable values via environment
- TF_WORKSPACE: Active workspace
Safety Controls
⚠️ terraform apply ALWAYS requires confirmation ⚠️ terraform destroy is BLOCKED by default ⚠️ State modifications require confirmation ⚠️ Review plan output before apply
Agent Integration
- devops (primary): Infrastructure management
- architect (secondary): Infrastructure design
- cloud-integrator (secondary): Cloud provisioning
Troubleshooting
| Issue |
Solution |
| Init failed |
Check provider credentials |
| State locked |
Check for other operations |
| Plan failed |
Review error output carefully |
Memory Protocol (MANDATORY)
Before starting: Read .claude/context/memory/learnings.md
After completing:
- New pattern ->
.claude/context/memory/learnings.md
- Issue found ->
.claude/context/memory/issues.md
- Decision made ->
.claude/context/memory/decisions.md
ASSUME INTERRUPTION: If it's not in memory, it didn't happen.
