infra-as-code-review
Write an infrastructure-as-code review checklist and conduct a structured review of Terraform, CloudFormation, Pulumi, or Ansible code. Use when asked to review IaC code, audit infrastructure configurations, check cloud security posture, or produce a reusable IaC review checklist. Produces a structured review report with severity-categorized findings, remediation guidance, and a reusable checklist.
npx skills add mohitagw15856/pm-claude-skills --skill infra-as-code-review --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Infrastructure-as-Code Review Produce a structured infrastructure-as-code review that applies security, reliability, and operational quality standards to a specific body of IaC code. The output serves two purposes: an actionable review report for the code at hand (with findings by severity and specific remediation steps), and a reusable checklist the team can apply to every future IaC change. If the user provides actual code, analyze it and populate the findings table with real issues. If no code is provided, produce the checklist and a template findings report. ## Required Inputs Ask for these if not already provided: - **IaC tool** — Terraform, CloudFormation, Pulumi, Ansible, or CDK - **Cloud provider** — AWS, GCP, Azure, or multi-cloud - **What the code provisions** — a brief description (e.g., "VPC, EKS cluster, and RDS instance for the payments service") - **Security policies or naming standards in use** — any existing org standards to check against; if none, use sensible defaults - **The IaC code itself** — paste or describe it; if not provided, produce the checklist template only and note findings require code ## Output Format --- # IaC Review Report: [What Is Being Provi
- Required Inputs
- Output Format
- Executive Summary
- Findings
- Critical Findings
- High Findings
- Medium Findings
- Low Findings
- Reusable IaC Review Checklist
- 1. IAM and Access Control
- 2. Secrets Management
- 3. Encryption at Rest
- 4. Encryption in Transit
- 5. Network and Public Access
What does the infra-as-code-review skill do?
Write an infrastructure-as-code review checklist and conduct a structured review of Terraform, CloudFormation, Pulumi, or Ansible code. Use when asked to review IaC code, audit infrastructure configurations, check cloud security posture, or produce a reusable IaC review checklist. Produces a structured review report with severity-categorized findings, remediation guidance, and a reusable checklist.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill infra-as-code-review --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.