terrashark

仓库创建 2026年2月23日最近提交 8 天前SkillHot 收录 21 天前

▸ 精选理由

覆盖身份、密钥、Blast-radius 与合规等常见失败场景，适合 IaC 审核与迁移。

▸ 风险提示

可能需要访问云凭证、状态后端或执行环境以完成诊断

这个 Skill 做什么

针对 Terraform/OpenTofu 提供故障模式诊断与修复流程，减少 IaC 幻觉与配置风险。

诊断并修复 Terraform/OpenTofu 常见故障：身份抖动、密钥泄露、blast-radius 错误、CI drift 和合规缺口，避免 IaC 产生幻觉式错误。在生成、审查、重构或迁移基础设施代码以及搭建交付/测试流水线时用。它按步骤记录执行上下文并给出可操作的修复流程，能显著降低配置风险和安全隐患。

▸ 展开 SKILL.md 英文原文

Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps. Use when generating, reviewing, refactoring, or migrating IaC and when building delivery/testing pipelines.

开发编程TerraformIaC安全通用

306

Stars

Forks

仓库内 Skill

+10

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/LukasNiessen/terrashark/main/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/LukasNiessen/terrashark/main/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Terrashark: Failure-Mode Workflow for Terraform/OpenTofu

Run this workflow top to bottom.

## 1) Capture execution context

Record before writing code:
- runtime (`terraform` or `tofu`) and exact version
- provider(s), target platform, and state backend
- execution path (local CLI, CI, HCP Terraform/TFE, Atlantis)
- environment criticality (dev/shared/prod)

If unknown, state assumptions explicitly.

## 2) Diagnose likely failure mode(s)

Select one or more based on user intent and risk:
- identity churn: resource addressing instability, refactor breakage
- secret exposure: secrets in state, logs, defaults, artifacts
- blast radius: oversized stacks, weak boundaries, unsafe applies
- CI d

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有