菜单
Run and review an Azure-backed Terraform plan for an infrastructure pull request without changing the user's worktree or remote state.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/learntocloud/learn-to-cloud-app --skill plan-terraform命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | plan-terraform |
| description | Run and review an Azure-backed Terraform plan for an infrastructure pull request without changing the user's worktree or remote state. |
Use the supplied PR. If omitted, select it only when exactly one open PR changes
infra/**; otherwise ask the user.
Confirm the PR is open, targets main, and changes infra/**.
Update it with main, then record the exact head SHA.
Verify Azure CLI authentication, Terraform availability, and that the active
subscription matches repository variable AZURE_SUBSCRIPTION_ID.
Create a detached worktree for that SHA under the current session's files/
directory. Never plan in the primary worktree.
Inspect .github/workflows/deploy.yml and mirror its current backend key and
TF_VAR_* inputs. Retrieve required repository variables and Azure values
without printing secrets.
In the worktree's infra/, run:
terraform init -backend-config="key=learn-to-cloud-${AZURE_ENV_NAME}.tfstate"
terraform plan -input=false -lock-timeout=120s -no-color
Remove the temporary worktree on success or failure.
Never save a plan file, apply, unlock, import, modify state, merge the PR, or expose secrets.
Report every resource action and compare it with the diff. No changes is the
expected result for provider-only updates. Block on destroy/replacement,
identity or authentication changes, state-access failures, authorization
errors, or actions not explained by the PR.
Check Azure production health across the API, telemetry, PostgreSQL, dependencies, and alerts. Use for "check prod", "is prod up", "prod status", "health check", "any errors?", or "check Azure".
Diagnose and resolve GitHub Actions deployment, Terraform, migration-job, and Azure authorization failures. Use when deploy.yml or a deployment fails.
Query production PostgreSQL with Entra ID authentication for user investigation and data debugging. Use for production database lookups or ad-hoc queries.