| name | terraform-plan-review |
| description | Reviews Terraform plans and IaC diffs for risky infrastructure changes, destructive actions, security exposure, drift, and rollout concerns. |
Terraform Plan Review
Use this skill when reviewing Terraform, OpenTofu, or infrastructure-as-code plan output and related diffs.
Inputs
- Plan output, IaC diff, module changes, variable changes, provider versions, and target environment
- Expected intent of the infrastructure change
Steps
- Summarize resource counts: create, update, replace, destroy, and no-op if available.
- Identify destructive or replacement actions and whether they are expected.
- Review changes to networking, IAM, secrets, encryption, logging, public exposure, backups, and data stores.
- Check for drift or unexpected changes outside the stated intent.
- Inspect module/provider/version changes for blast radius.
- Note operational risks: downtime, state migration, dependency ordering, quotas, and rollback difficulty.
- Recommend pre-apply checks and post-apply verification.
Output
Return:
- Plan summary
- Expected changes
- Unexpected or risky changes
- Security and compliance concerns
- Apply readiness recommendation
- Verification checklist
Guidelines
- Treat
destroy and replace as high attention even when expected.
- Do not approve a plan if the intent is unclear.
- Include exact resource names when available.
