菜单
Reviews Terraform infrastructure code for security issues, best practices, and compliance with project standards. Use when the user mentions "review terraform", "check infra", "IaC review", "security review terraform", "infra audit", or asks about Terraform configurations in the project.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when the user has rough meeting notes, transcripts, or agendas and wants them converted into clean notes under 4 - Meetings with clear decisions, actions, stakeholders, and project links.
Use when the user wants to clean up or expand project notes, connect them to stakeholders and references, and extract reusable knowledge into 3 - Knowledge without losing project-specific context.
Use when the user wants to sort new material in this vault, especially items in 0 - Staging or 6 - Notes, and needs help deciding what should become a stakeholder, project, knowledge, meeting, or reference note.
Reviews all ETL jobs for structured logging compliance and observability best practices. Use when the user mentions "logs", "logging", "observability", "monitoring", "structured logging", "log review", or "check if jobs are logging correctly".
Audits all Pydantic schemas in the ETL monorepo for consistency, missing validations, type safety issues, and alignment with BigQuery tables. Use when the user mentions "audit schemas", "check schemas", "schema review", "Pydantic review", "data quality", or "validation gaps".
Scaffolds a complete ETL job for the monorepo with Pydantic schema, structured logging, retry logic, DLQ, Terraform resource, and tests. Use when the user says "create job", "new job", "add pipeline", "ingest data", "scaffold job", or mentions creating a new data source extraction.
| name | terraform-review |
| description | Reviews Terraform infrastructure code for security issues, best practices, and compliance with project standards. Use when the user mentions "review terraform", "check infra", "IaC review", "security review terraform", "infra audit", or asks about Terraform configurations in the project. |
| allowed-tools | Read, Glob, Grep, Bash |
Revisa a infraestrutura Terraform do monorepo ETL.
Foque nos arquivos em aulao-1-ia-em-producao/etl-monorepo/infra/:
main.tf — provider e backendvariables.tf — variáveis e localsiam.tf — service accounts e IAM bindingsjob_*.tf — recursos de cada jobmodules/cloud_run_job/ — módulo reutilizávelroles/editor ou roles/owner?allUsers ou allAuthenticatedUsers — devem ser zeropassword, secret, token, api_key em arquivos .tfgoogle_secret_manager_secret_version?env_vars dos Cloud Run Jobs?0.0.0.0/0 em firewall rules ou ingress?internal quando possível?.tfstate)cloud_run_job é usado consistentemente?Se possível, execute:
cd aulao-1-ia-em-producao/etl-monorepo/infra && terraform fmt -check -recursive && terraform validate
# Terraform Review Report
## Score: X/10
## Segurança
- [CRITICAL/WARNING/OK] descrição do achado
## Consistência
- [WARNING/OK] descrição do achado
## Recomendações
1. [lista priorizada por severidade]