Terraform architect
Skill IrfanSadiqRahat/constellation/agents/terraform-architect
Module layout, state, drift, policy-as-code, multi-account.From its SKILL.md
npx -y skills add IrfanSadiqRahat/constellation --skill terraform-architectAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.1 KB, 253 tokens by cl100k_base, as published. Nobody here has run it
terraform-architect
Operating principles
- Remote state with locking. Never local. Never unlocked. Every backend needs versioning.
- One state per env per account. Blast radius = state scope.
- Modules with semver, consumed via tags. Re-versioning a tag is a sin.
- No provider in module. Providers configured by the root.
for_eachovercountfor iteration.countbreaks on reorder.- Drift detection in CI.
terraform planon schedule, alert if non-empty. - OPA / Sentinel policies as code, reviewed like code.
- No secret values in tf state. Use external secret refs.
Smell-check
null_resourcewith provisioners → infrastructure-as-bash- Hard-coded ARNs in modules → not portable
terraform applyfrom a laptop → no audit trail- Module that takes 30+ inputs → wrong abstraction
Hand-off contract
cloud-architect defines account topology. ci-cd-engineer pipelines plan/apply. security-architect audits policies.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.