#949 by GitHub stars
hashicorp/agent-skills
A collection of Agent skills and Claude Code plugins for HashiCorp products.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
plugins/packer/skills/aws-ami-builder/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/packer/skills/azure-image-builder/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/packer/skills/push-to-registry/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/packer/skills/windows-builder/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/azure-verified-modules/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/new-terraform-provider/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-actions/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-configuration/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-docs/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-ephemeral-resources/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-framework-migration/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-resources/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/provider-test-patterns/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/refactor-module/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/run-acceptance-tests/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/terraform-policy/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
A local comparison is unavailable. You can inspect the recorded versions on GitHub.
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/terraform-search-import/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/terraform-stacks/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/terraform-style-guide/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
plugins/terraform/skills/terraform-test/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Not checked yet → After Network or broad shell
f706481af9b8 → 5e30fa5c867b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Not checked yet
First observation → f706481af9b8
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit 5e30fa5c867ba6777c37e4206babfd08049c396f
git clone --filter=blob:none --no-checkout https://github.com/hashicorp/agent-skills.git .hotskills/hashicorp-agent-skills && git -C .hotskills/hashicorp-agent-skills checkout --detach 5e30fa5c867ba6777c37e4206babfd08049c396f
# Copy each selected skill directory from .hotskills/hashicorp-agent-skills into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/hashicorp/agent-skills.git .hotskills/hashicorp-agent-skills && git -C .hotskills/hashicorp-agent-skills checkout --detach 5e30fa5c867ba6777c37e4206babfd08049c396f
# Copy each selected skill directory from .hotskills/hashicorp-agent-skills into .agents/skills/<skill-name>/918GitHub stars
8stars in 7 days
20skills in this repository
2commits in 30 days
Heat
6.0- Star growth, last 7 daysAhead of 80% of tracked repositories
- Star growth, last 24 hoursAhead of 86% of tracked repositories
- Rank movement, last 7 daysAhead of 35% of tracked repositories
- Commits, last 30 daysAhead of 60% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- aws-ami-builder
plugins/packer/skills/aws-ami-builder - azure-image-builder
plugins/packer/skills/azure-image-builder - push-to-registry
plugins/packer/skills/push-to-registry - windows-builder
plugins/packer/skills/windows-builder - azure-verified-modules
plugins/terraform/skills/azure-verified-modules - new-terraform-provider
plugins/terraform/skills/new-terraform-provider - provider-actions
plugins/terraform/skills/provider-actions - provider-configuration
plugins/terraform/skills/provider-configuration - provider-docs
plugins/terraform/skills/provider-docs - provider-ephemeral-resources
plugins/terraform/skills/provider-ephemeral-resources - provider-framework-migration
plugins/terraform/skills/provider-framework-migration - provider-resources
plugins/terraform/skills/provider-resources - provider-test-patterns
plugins/terraform/skills/provider-test-patterns - refactor-module
plugins/terraform/skills/refactor-module - run-acceptance-tests
plugins/terraform/skills/run-acceptance-tests - terraform-policy
plugins/terraform/skills/terraform-policy - terraform-search-import
plugins/terraform/skills/terraform-search-import - terraform-stacks
plugins/terraform/skills/terraform-stacks - terraform-style-guide
plugins/terraform/skills/terraform-style-guide - terraform-test
plugins/terraform/skills/terraform-test
How it works
aws-ami-builder
When your agent uses it
Build Amazon Machine Images (AMIs) with Packer using the amazon-ebs builder. Use when creating custom AMIs for EC2 instances.
What it loads into context
Frontmatter
45 tokensAlways available to the agent
SKILL.md
998 tokensWhen the skill is activated
Reference documents
151,344 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Basic AMI Template
- Common Source AMI Filters
- Multi-Region AMI
- Authentication
- Build Commands
- Common Issues
- References
Scripts executed separately
../../../terraform/skills/new-terraform-provider/assets/main.go../../../terraform/skills/new-terraform-provider/assets/provider.go../../../terraform/skills/terraform-search-import/scripts/list_resources.sh
Files
../../../../.claude-plugin/marketplace.jsonasset909 bytes../../.claude-plugin/plugin.jsonasset451 bytesSKILL.mdcore3,700 bytesSKILL.mdcore3,700 bytesSKILL.mdcore3,700 bytesSKILL.mdcore3,700 bytesSKILL.mdcore3,700 bytesSKILL.mdcore3,700 bytesSKILL.mdcore3,700 bytes../azure-image-builder/SKILL.mddoc4,240 bytes../push-to-registry/SKILL.mddoc4,778 bytes../windows-builder/SKILL.mddoc4,601 bytes../../../terraform/.claude-plugin/plugin.jsonasset492 bytes../../../terraform/skills/azure-verified-modules/SKILL.mddoc16,300 bytes../../../terraform/skills/new-terraform-provider/SKILL.mddoc1,808 bytes../../../terraform/skills/new-terraform-provider/assets/main.goruns1,141 bytes../../../terraform/skills/new-terraform-provider/assets/provider.goruns4,395 bytes../../../terraform/skills/provider-actions/SKILL.mddoc17,274 bytes../../../terraform/skills/provider-configuration/SKILL.mddoc14,094 bytes../../../terraform/skills/provider-configuration/references/case-studies.mddoc6,272 bytes../../../terraform/skills/provider-configuration/references/credential-chain.mddoc18,130 bytes../../../terraform/skills/provider-docs/SKILL.mddoc4,022 bytes../../../terraform/skills/provider-docs/agents/openai.yamlasset343 bytes../../../terraform/skills/provider-docs/references/hashicorp-provider-docs.mddoc5,516 bytes../../../terraform/skills/provider-ephemeral-resources/SKILL.mddoc9,338 bytes../../../terraform/skills/provider-framework-migration/SKILL.mddoc8,812 bytes../../../terraform/skills/provider-framework-migration/references/schema-mapping.mddoc6,224 bytes../../../terraform/skills/provider-resources/SKILL.mddoc18,322 bytes../../../terraform/skills/provider-resources/references/design-principles.mddoc4,981 bytes../../../terraform/skills/provider-resources/references/retries-and-waiters.mddoc5,824 bytes../../../terraform/skills/provider-test-patterns/SKILL.mddoc12,993 bytes../../../terraform/skills/provider-test-patterns/references/checks.mddoc6,844 bytes../../../terraform/skills/provider-test-patterns/references/ephemeral.mddoc6,002 bytes../../../terraform/skills/provider-test-patterns/references/sweepers.mddoc2,403 bytes../../../terraform/skills/refactor-module/SKILL.mddoc14,729 bytes../../../terraform/skills/run-acceptance-tests/SKILL.mddoc3,059 bytes../../../terraform/skills/terraform-policy/.gitignoreasset29 bytes../../../terraform/skills/terraform-policy/README.mddoc2,822 bytes../../../terraform/skills/terraform-policy/SKILL.mddoc6,431 bytes../../../terraform/skills/terraform-policy/examples/README.mddoc2,592 bytes../../../terraform/skills/terraform-policy/examples/conversion/cloudfront-associated-with-waf/README.mddoc871 bytes../../../terraform/skills/terraform-policy/examples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.policy.hclasset589 bytes../../../terraform/skills/terraform-policy/examples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.sentinelasset1,613 bytes../../../terraform/skills/terraform-policy/examples/conversion/cloudtrail-server-side-encryption-enabled/README.mddoc846 bytes../../../terraform/skills/terraform-policy/examples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.policy.hclasset512 bytes../../../terraform/skills/terraform-policy/examples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.sentinelasset1,466 bytes../../../terraform/skills/terraform-policy/examples/conversion/dms-endpoint-should-be-ssl-configured/README.mddoc872 bytes../../../terraform/skills/terraform-policy/examples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.policy.hclasset516 bytes../../../terraform/skills/terraform-policy/examples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.sentinelasset1,547 bytes../../../terraform/skills/terraform-policy/examples/conversion/dms-endpoints-should-use-ssl/README.mddoc800 bytes../../../terraform/skills/terraform-policy/examples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.policy.hclasset579 bytes../../../terraform/skills/terraform-policy/examples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.sentinelasset1,421 bytes../../../terraform/skills/terraform-policy/examples/conversion/ec2-network-acl-should-have-subnet-ids/README.mddoc970 bytes../../../terraform/skills/terraform-policy/examples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.policy.hclasset1,035 bytes../../../terraform/skills/terraform-policy/examples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.sentinelasset2,941 bytes../../../terraform/skills/terraform-policy/examples/conversion/ec2-vpc-default-security-group-no-traffic/README.mddoc1,107 bytes../../../terraform/skills/terraform-policy/examples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.policy.hclasset865 bytes../../../terraform/skills/terraform-policy/examples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.sentinelasset3,658 bytes../../../terraform/skills/terraform-policy/examples/conversion/efs-access-point-should-enforce-user-identity/README.mddoc727 bytes../../../terraform/skills/terraform-policy/examples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.policy.hclasset448 bytes../../../terraform/skills/terraform-policy/examples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.sentinelasset1,336 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/README.mddoc777 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.policy.hclasset547 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.sentinelasset1,532 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-encrypted-at-rest/README.mddoc734 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.policy.hclasset584 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.sentinelasset1,571 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-https-required/README.mddoc904 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-https-required/elasticsearch-https-required.policy.hclasset1,132 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-https-required/elasticsearch-https-required.sentinelasset2,352 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-in-vpc-only/README.mddoc890 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.policy.hclasset589 bytes../../../terraform/skills/terraform-policy/examples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.sentinelasset1,935 bytes../../../terraform/skills/terraform-policy/examples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/README.mddoc1,103 bytes../../../terraform/skills/terraform-policy/examples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.policy.hclasset845 bytes../../../terraform/skills/terraform-policy/examples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.sentinelasset2,125 bytes../../../terraform/skills/terraform-policy/examples/conversion/s3-block-public-access-bucket-level/README.mddoc1,123 bytes../../../terraform/skills/terraform-policy/examples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.policy.hclasset1,184 bytes../../../terraform/skills/terraform-policy/examples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.sentinelasset3,304 bytes../../../terraform/skills/terraform-policy/examples/conversion/s3-bucket-should-have-object-lock-enabled/README.mddoc975 bytes../../../terraform/skills/terraform-policy/examples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.policy.hclasset1,030 bytes../../../terraform/skills/terraform-policy/examples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.sentinelasset2,868 bytes../../../terraform/skills/terraform-policy/examples/conversion/secretsmanager-auto-rotation-enabled-check/README.mddoc955 bytes../../../terraform/skills/terraform-policy/examples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.policy.hclasset867 bytes../../../terraform/skills/terraform-policy/examples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.sentinelasset2,250 bytes../../../terraform/skills/terraform-policy/examples/conversion/step-functions-state-machine-logging-enabled/README.mddoc778 bytes../../../terraform/skills/terraform-policy/examples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.policy.hclasset724 bytes../../../terraform/skills/terraform-policy/examples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.sentinelasset1,594 bytes../../../terraform/skills/terraform-policy/references/tfpolicy-author.mddoc104,578 bytes../../../terraform/skills/terraform-policy/references/tfpolicy-test.mddoc47,617 bytes../../../terraform/skills/terraform-policy/references/verified-syntax.mddoc103,651 bytes../../../terraform/skills/terraform-search-import/SKILL.mddoc9,927 bytes../../../terraform/skills/terraform-search-import/references/MANUAL-IMPORT.mddoc2,449 bytes../../../terraform/skills/terraform-search-import/scripts/list_resources.shruns1,231 bytes../../../terraform/skills/terraform-stacks/SKILL.mddoc17,274 bytes../../../terraform/skills/terraform-stacks/references/api-monitoring.mddoc16,608 bytes../../../terraform/skills/terraform-stacks/references/component-blocks.mddoc10,147 bytes../../../terraform/skills/terraform-stacks/references/deployment-blocks.mddoc8,863 bytes../../../terraform/skills/terraform-stacks/references/examples.mddoc30,727 bytes../../../terraform/skills/terraform-stacks/references/linked-stacks.mddoc4,341 bytes../../../terraform/skills/terraform-stacks/references/troubleshooting.mddoc16,711 bytes../../../terraform/skills/terraform-style-guide/SECURITY.mddoc4,872 bytes../../../terraform/skills/terraform-style-guide/SKILL.mddoc6,963 bytes../../../terraform/skills/terraform-test/SKILL.mddoc11,148 bytes../../../terraform/skills/terraform-test/references/CI_CD.mddoc1,931 bytes../../../terraform/skills/terraform-test/references/EXAMPLES.mddoc6,609 bytes../../../terraform/skills/terraform-test/references/MOCK_PROVIDERS.mddoc4,519 bytes
Read SKILL.md
# AWS AMI Builder
Build Amazon Machine Images (AMIs) using Packer's `amazon-ebs` builder.
**Reference:** [Amazon EBS Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/amazon/latest/components/builder/ebs)
> **Note:** Building AMIs incurs AWS costs (EC2 instances, EBS storage, data transfer). Builds typically take 10-30 minutes depending on provisioning complexity.
## Basic AMI Template
```hcl
packer {
required_plugins {
amazon = {azure-image-builder
When your agent uses it
Build Azure managed images and Azure Compute Gallery images with Packer. Use when creating custom images for Azure VMs.
What it loads into context
Frontmatter
38 tokensAlways available to the agent
SKILL.md
1,030 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Basic Managed Image
- Azure Compute Gallery
- Authentication
- Build Commands
- Common Issues
- References
Files
SKILL.mdcore4,240 bytesSKILL.mdcore4,240 bytesSKILL.mdcore4,240 bytesSKILL.mdcore4,240 bytesSKILL.mdcore4,240 bytesSKILL.mdcore4,240 bytesSKILL.mdcore4,240 bytes
Read SKILL.md
# Azure Image Builder
Build Azure managed images and Azure Compute Gallery images using Packer's `azure-arm` builder.
**Reference:** [Azure ARM Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/azure/latest/components/builder/arm)
> **Note:** Building Azure images incurs costs (compute, storage, data transfer). Builds typically take 15-45 minutes depending on provisioning and OS.
## Basic Managed Image
```hcl
packer {
required_plugins {
azure = {push-to-registry
When your agent uses it
Push Packer build metadata to HCP Packer registry for tracking and managing image lifecycle. Use when integrating Packer builds with HCP Packer for version control and governance.
What it loads into context
Frontmatter
51 tokensAlways available to the agent
SKILL.md
1,203 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Basic Registry Configuration
- Authentication
- Registry Configuration Options
- CI/CD Integration
- Querying in Terraform
- Common Issues
- Best Practices
- References
Files
SKILL.mdcore4,778 bytesSKILL.mdcore4,778 bytesSKILL.mdcore4,778 bytes
Read SKILL.md
# Push to HCP Packer Registry
Configure Packer templates to push build metadata to HCP Packer registry.
**Reference:** [HCP Packer Registry](https://developer.hashicorp.com/hcp/docs/packer)
> **Note:** HCP Packer is free for basic use. Builds push metadata only (not actual images), adding minimal overhead (<1 minute).
## Basic Registry Configuration
```hcl
packer {
required_version = ">= 1.7.7"
}windows-builder
When your agent uses it
Build Windows images with Packer using WinRM communicator and PowerShell provisioners. Use when creating Windows AMIs, Azure images, or VMware templates.
What it loads into context
Frontmatter
44 tokensAlways available to the agent
SKILL.md
1,227 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- WinRM Communicator Setup
- PowerShell Provisioners
- Cleanup
- Common Issues
- References
Files
SKILL.mdcore4,601 bytesSKILL.mdcore4,601 bytesSKILL.mdcore4,601 bytes
Read SKILL.md
# Windows Builder
Platform-agnostic patterns for building Windows images with Packer.
**Reference:** [WinRM Communicator](https://developer.hashicorp.com/packer/docs/communicators/winrm)
> **Note:** Windows builds incur significant costs and time. Expect 45-120 minutes per build due to Windows Updates. Failed builds may leave resources running - always verify cleanup.
## WinRM Communicator Setup
Windows requires WinRM for Packer communication.
### AWS Example
azure-verified-modules
When your agent uses it
Azure Verified Modules (AVM) requirements and best practices for developing certified Azure Terraform modules. Use when creating or reviewing Azure modules that need AVM certification.
What it loads into context
Frontmatter
48 tokensAlways available to the agent
SKILL.md
3,977 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Table of Contents
- Module Cross-Referencing
- Azure Provider Requirements
- Code Style Standards
- Variable Requirements
- Output Requirements
- Local Values Standards
- Terraform Configuration Requirements
- Testing Requirements
- Documentation Requirements
- Breaking Changes & Feature Management
- Contribution Standards
- Compliance Checklist
- Summary Statistics
Files
SKILL.mdcore16,300 bytesSKILL.mdcore16,300 bytesSKILL.mdcore16,300 bytesSKILL.mdcore16,300 bytesSKILL.mdcore16,300 bytes
Read SKILL.md
# Azure Verified Modules (AVM) Requirements
This guide covers the mandatory requirements for Azure Verified Modules certification. These requirements ensure consistency, quality, and maintainability across Azure Terraform modules.
**References:**
- [Azure Verified Modules](https://azure.github.io/Azure-Verified-Modules/)
- [AVM Module Specifications](https://azure.github.io/Azure-Verified-Modules/specs/module-specs/)
## Table of Contents
- [Module Cross-Referencing](#module-cross-referencing)
- [Azure Provider Requirements](#azure-provider-requirements)
- [Code Style Standards](#code-style-standards)
- [Variable Requirements](#variable-requirements)new-terraform-provider
When your agent uses it
Use this when scaffolding a new Terraform provider with the Plugin Framework: workspace layout, go module setup, provider server main.go, and a provider.go with schema and Configure. Also use when a user wants to start building a provider for a new API or asks how to begin a terraform-provider-* project.
What it loads into context
Frontmatter
117 tokensAlways available to the agent
SKILL.md
422 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Scripts executed separately
assets/main.goassets/provider.go
Files
SKILL.mdcore1,808 bytesassets/main.goruns1,141 bytesassets/provider.goruns4,395 bytes
Read SKILL.md
To scaffold a new Terraform provider with Plugin Framework:
1. If I am already in a Terraform provider workspace, then confirm that I want
to create a new workspace. If I do not want to create a new workspace, then
skip all remaining steps.
1. Create a new workspace root directory. The root directory name should be
prefixed with "terraform-provider-". Perform all subsequent steps in this
new workspace.
1. Initialize a new Go module.
1. Run `go get -u github.com/hashicorp/terraform-plugin-framework@latest`.
1. Write a main.go file that follows [the example](assets/main.go).
1. Write an `internal/provider/provider.go` file that follows
[the example](assets/provider.go). Rename the `demo` provider, the
`DEMO_*` environment variables, and the authentication attributes toprovider-actions
When your agent uses it
Implement Terraform Provider actions using the Plugin Framework. Use when developing imperative operations that execute at lifecycle events (before/after create, update, destroy).
What it loads into context
Frontmatter
65 tokensAlways available to the agent
SKILL.md
3,708 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- First Action Setup
- File Structure
- Action Schema Definition
- Action Invoke Method
- Key Implementation Requirements
- Common Action Patterns
- Action Triggers
- Testing Actions
- Documentation Standards
- Changelog Entry Format (provider-specific convention)
- Pre-Submission Checklist
- References
Files
SKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytes
Read SKILL.md
# Terraform Provider Actions Implementation Guide
## Overview
Terraform Actions enable imperative operations during the Terraform lifecycle. Actions are experimental features that allow performing provider operations at specific lifecycle events (before/after create, update, destroy).
**References:**
- [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework)
- [Terraform Plugin Framework Actions](https://developer.hashicorp.com/terraform/plugin/framework/actions)
## First Action Setup
When adding the first action to a provider that has never had one, several one-time scaffolding steps are required:
provider-configuration
When your agent uses it
Implement Terraform provider configuration and authentication with the Plugin Framework: provider schema for credentials (Optional + Sensitive attributes), environment variable fallbacks, credential provider chains (static config, then environment variables, shared credentials file, and platform identity), unknown-value guards in Configure(), secret redaction, configure-time credential validation, and diagnostics that name every source tried. Use when implementing or reviewing a provider's Configure method or provider schema, adding authentication options (API keys, tokens, profiles, credentials files, assume-role), deciding how a provider should resolve credentials, debugging "no valid credential sources" or missing-credentials errors, or unit testing credential resolution.
What it loads into context
Frontmatter
192 tokensAlways available to the agent
SKILL.md
2,970 tokensWhen the skill is activated
Reference documents
5,872 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Provider Schema for Authentication
- The Credential Provider Chain
- Wiring the Chain into Configure
- Diagnostics That Unblock Users
- Secret Hygiene
- Configure-Time Validation
- Unit Testing the Chain
- Checklist
- Related Skills
Files
SKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesSKILL.mdcore14,094 bytesreferences/case-studies.mddoc6,272 bytesreferences/credential-chain.mddoc18,130 bytes
Read SKILL.md
# Terraform Provider Configuration and Authentication
How a provider accepts connection settings and resolves credentials. Poor
authentication UX is the first thing every user of a provider hits; a
well-designed credential provider chain is what separates a production-grade
provider from a demo. The examples use a fictional `examplecloud` provider
and the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework/providers).
**References** (load when needed):
- `references/credential-chain.md` — complete, compilable credential chain
implementation (providers, chain, file profiles, Configure wiring, tests)
- `references/case-studies.md` — how the AWS provider (`aws-sdk-go-base`)
and smaller providers structure real credential chains
provider-docs
When your agent uses it
Create, update, and review Terraform provider documentation for Terraform Registry using HashiCorp-recommended patterns, tfplugindocs templates, and schema descriptions. Use when adding or changing provider configuration, resources, data sources, ephemeral resources, list resources, functions, actions, or guides; when validating generated docs; and when troubleshooting missing or incorrect Registry documentation.
What it loads into context
Frontmatter
85 tokensAlways available to the agent
SKILL.md
847 tokensWhen the skill is activated
Reference documents
1,228 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Follow This Workflow
- Enforce Quality Bar
- Load References On Demand
Files
SKILL.mdcore4,022 bytesSKILL.mdcore4,022 bytesSKILL.mdcore4,022 bytesSKILL.mdcore4,022 bytesagents/openai.yamlasset343 bytesreferences/hashicorp-provider-docs.mddoc5,516 bytes
Read SKILL.md
# Terraform Provider Docs
## Follow This Workflow
1. Confirm scope and documentation targets.
- Map code changes to the exact doc targets: provider index, resources, data sources, ephemeral resources, list resources, functions, actions, or guides.
- Decide whether content should come from schema descriptions, templates, or both.
2. Write schema descriptions first.
- Add precise user-facing descriptions to schema fields so generated docs stay aligned with behavior.
- Keep wording specific to argument purpose, constraints, defaults, and computed behavior.
3. Add or update template files in `docs/`.
- Create only files that map to implemented provider objects.provider-ephemeral-resources
When your agent uses it
Implement Terraform provider ephemeral resources with the Plugin Framework: the Open/Renew/Close lifecycle, ephemeral schema design, registration via EphemeralResources, renewal for expiring credentials, and how ephemeral values flow into write-only attributes and provider configuration. Use when adding an ephemeral resource, exposing secrets/tokens/certificates that must never persist in state or plan, deciding between an ephemeral resource and a data source, or wiring short-lived credentials from one provider into another.
What it loads into context
Frontmatter
154 tokensAlways available to the agent
SKILL.md
2,112 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use One
- Lifecycle
- Implementation
- Registration
- Design Rules
- Testing
- Documentation
- Checklist
Files
SKILL.mdcore9,338 bytesSKILL.mdcore9,338 bytesSKILL.mdcore9,338 bytesSKILL.mdcore9,338 bytesSKILL.mdcore9,338 bytes
Read SKILL.md
# Terraform Provider Ephemeral Resources
Ephemeral resources (Terraform 1.10+) produce values that are **never
persisted to state or plan**. They exist for exactly one job: handing
secrets — tokens, generated passwords, short-lived certificates, decrypted
values — to the parts of a configuration that need them, without writing
them to disk. Any data source that returns a sensitive value is a candidate
to be (or to also exist as) an ephemeral resource.
Official docs: [Ephemeral Resources](https://developer.hashicorp.com/terraform/plugin/framework/ephemeral-resources).
## When to Use One
| Situation | Use |provider-framework-migration
When your agent uses it
Migrate Terraform provider resources and data sources from Plugin SDKv2 to the Plugin Framework: muxing both plugins in one provider (terraform-plugin-mux, tf5to6server), per-resource migration workflow, SDKv2-to-Framework schema mapping (ForceNew, ValidateFunc, DiffSuppressFunc, Default, Timeouts, blocks), null-vs-zero-value behavioral traps, and state-compatibility verification. Use when converting or translating SDKv2 resources to the Framework, setting up a muxed provider server, deciding whether a resource should be migrated at all, or debugging plan diffs and state errors that appeared after a migration.
What it loads into context
Frontmatter
193 tokensAlways available to the agent
SKILL.md
2,068 tokensWhen the skill is activated
Reference documents
1,549 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Decide Whether to Migrate at All
- Step 1: Mux the Provider
- Step 2: Baseline Before You Touch Anything
- Step 3: Port the Resource
- Step 4: Move the Registration
- Step 5: Verify
- Checklist
- Related Skills
Files
SKILL.mdcore8,812 bytesSKILL.mdcore8,812 bytesSKILL.mdcore8,812 bytesreferences/schema-mapping.mddoc6,224 bytes
Read SKILL.md
# Migrating from Plugin SDKv2 to the Plugin Framework
The Plugin Framework is required for net-new resources and data sources;
SDKv2 is maintenance-only. Migration is **per-resource and incremental**: a
muxed provider serves SDKv2 and Framework implementations side by side, so
you never need a big-bang rewrite. This skill covers the mux setup, the
per-resource workflow, and the behavioral traps that turn a mechanical
translation into a silent breaking change.
**Reference** (load when needed):
- `references/schema-mapping.md` — the full SDKv2 → Framework translation
table with code pairs
Official guide: [Framework migration](https://developer.hashicorp.com/terraform/plugin/framework/migrating).provider-resources
When your agent uses it
Implement Terraform Provider resources and data sources using the Plugin Framework: CRUD operations, schema design, plan modifiers and validators, not-found handling, waiters for eventually consistent APIs, import support, resource design principles, and required acceptance test coverage. Use when adding or changing a resource or data source, deciding whether an API concept should be a resource, wiring a resource to the provider's configured client, handling drift or resource-not-found, or reviewing a resource implementation before submission.
What it loads into context
Frontmatter
153 tokensAlways available to the agent
SKILL.md
4,065 tokensWhen the skill is activated
Reference documents
2,387 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- File Structure
- Resource Structure
- CRUD Operations
- Resource Design Principles
- Schema Design
- State Management
- Testing
- Error Handling
- Documentation
- Pre-Submission Checklist
- References
Files
SKILL.mdcore18,322 bytesSKILL.mdcore18,322 bytesSKILL.mdcore18,322 bytesSKILL.mdcore18,322 bytesreferences/design-principles.mddoc4,981 bytesreferences/retries-and-waiters.mddoc5,824 bytes
Read SKILL.md
# Terraform Provider Resources Implementation Guide
## Overview
This guide covers developing Terraform Provider resources and data sources.
Resources represent infrastructure objects that Terraform manages through
Create, Read, Update, and Delete (CRUD) operations.
**Use the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework)
for all net-new resources and data sources.** Plugin SDKv2 is for maintaining
resources that already exist on it; do not write new code against it. A
provider can serve both during migration by muxing
([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)),
so adopting the Framework never requires a big-bang rewrite. To tell whichprovider-test-patterns
When your agent uses it
Terraform provider acceptance test patterns using terraform-plugin-testing with the Plugin Framework. Covers test structure, TestCase/TestStep fields, ConfigStateChecks with custom statecheck.StateCheck implementations, plan checks, CompareValue for cross-step assertions, config helpers, import testing with ImportStateKind, sweepers, and scenario patterns (basic, update, disappears, validation, regression), and ephemeral resource testing with the echoprovider package. Use when writing, reviewing, or debugging provider acceptance tests, including questions about statecheck, plancheck, TestCheckFunc, CheckDestroy, ExpectError, import state verification, ephemeral resources, or how to structure test files.
What it loads into context
Frontmatter
183 tokensAlways available to the agent
SKILL.md
2,965 tokensWhen the skill is activated
Reference documents
3,566 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Test Lifecycle
- Test Function Structure
- Provider Factory
- TestCase Fields
- TestStep Fields
- Check Functions
- Config Helpers
- Scenario Patterns
- Helper Functions
Files
SKILL.mdcore12,993 bytesSKILL.mdcore12,993 bytesreferences/checks.mddoc6,844 bytesreferences/ephemeral.mddoc6,002 bytesreferences/sweepers.mddoc2,403 bytes
Read SKILL.md
# Provider Acceptance Test Patterns
Patterns for writing acceptance tests using
[terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing)
with the [Plugin Framework](https://github.com/hashicorp/terraform-plugin-framework).
Source: [HashiCorp Testing Patterns](https://developer.hashicorp.com/terraform/plugin/testing/testing-patterns)
**References** (load when needed):
- `references/checks.md` — statecheck, plancheck, knownvalue types, tfjsonpath, comparers
- `references/sweepers.md` — sweeper setup, TestMain, dependencies
- `references/ephemeral.md` — ephemeral resource testing, echoprovider, multi-step patterns
---refactor-module
When your agent uses it
Transform monolithic Terraform configurations into reusable, maintainable modules following HashiCorp's module design principles and community best practices.
What it loads into context
Frontmatter
61 tokensAlways available to the agent
SKILL.md
3,695 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Capability Statement
- Prerequisites
- Input Parameters
- Execution Steps
- Refactoring Patterns
- Common Pitfalls
- Version Control Strategy
- Success Criteria
- Related Skills
- Resources
- Revision History
Files
SKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytesSKILL.mdcore14,729 bytes
Read SKILL.md
# Skill: Refactor Module
## Overview
This skill guides AI agents in transforming monolithic Terraform configurations into reusable, maintainable modules following HashiCorp's module design principles and community best practices.
## Capability Statement
The agent will analyze existing Terraform code and systematically refactor it into well-structured modules with:
- Clear interface contracts (variables and outputs)
- Proper encapsulation and abstraction
- Versioning and documentation
- Testing frameworks
- Migration path for existing state
## Prerequisitesrun-acceptance-tests
When your agent uses it
Guide for running acceptance tests for a Terraform provider. Use this when asked to run an acceptance test or to run a test with the prefix `TestAcc`, when a test fails with missing environment variables, or when diagnosing a failing or suspiciously passing acceptance test.
What it loads into context
Frontmatter
99 tokensAlways available to the agent
SKILL.md
708 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore3,059 bytes
Read SKILL.md
An acceptance test is a Go test function with the prefix `TestAcc`.
Before running: acceptance tests create **real infrastructure** against the
provider's live API, which may incur cost. Confirm the configured
credentials point at a test account before proceeding.
To run a focused acceptance test named `TestAccFeatureHappyPath`:
1. Run `go test -run=TestAccFeatureHappyPath -timeout 60m` with the
following environment variables:
- `TF_ACC=1`
Default to non-verbose test output. Always pass an explicit `-timeout`:
`go test` kills any test run after 10 minutes by default, and acceptanceterraform-policy
When your agent uses it
Write, test, or convert Terraform Policy files (.policy.hcl, .policytest.hcl, Sentinel→tfpolicy). Triggers: policy.hcl, policytest, convert sentinel, tfpolicy, write a policy.
What it loads into context
Frontmatter
90 tokensAlways available to the agent
SKILL.md
1,609 tokensWhen the skill is activated
Reference documents
66,480 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- USE FOR:
- DO NOT USE FOR:
- Routing
- Examples
- Troubleshooting
Files
.gitignoreasset29 bytesREADME.mddoc2,822 bytesSKILL.mdcore6,431 bytesSKILL.mdcore6,431 bytesSKILL.mdcore6,431 bytesexamples/README.mddoc2,592 bytesexamples/conversion/cloudfront-associated-with-waf/README.mddoc871 bytesexamples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.policy.hclasset589 bytesexamples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.sentinelasset1,613 bytesexamples/conversion/cloudtrail-server-side-encryption-enabled/README.mddoc846 bytesexamples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.policy.hclasset512 bytesexamples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.sentinelasset1,466 bytesexamples/conversion/dms-endpoint-should-be-ssl-configured/README.mddoc872 bytesexamples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.policy.hclasset516 bytesexamples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.sentinelasset1,547 bytesexamples/conversion/dms-endpoints-should-use-ssl/README.mddoc800 bytesexamples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.policy.hclasset579 bytesexamples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.sentinelasset1,421 bytesexamples/conversion/ec2-network-acl-should-have-subnet-ids/README.mddoc970 bytesexamples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.policy.hclasset1,035 bytesexamples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.sentinelasset2,941 bytesexamples/conversion/ec2-vpc-default-security-group-no-traffic/README.mddoc1,107 bytesexamples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.policy.hclasset865 bytesexamples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.sentinelasset3,658 bytesexamples/conversion/efs-access-point-should-enforce-user-identity/README.mddoc727 bytesexamples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.policy.hclasset448 bytesexamples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.sentinelasset1,336 bytesexamples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/README.mddoc777 bytesexamples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.policy.hclasset547 bytesexamples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.sentinelasset1,532 bytesexamples/conversion/elasticsearch-encrypted-at-rest/README.mddoc734 bytesexamples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.policy.hclasset584 bytesexamples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.sentinelasset1,571 bytesexamples/conversion/elasticsearch-https-required/README.mddoc904 bytesexamples/conversion/elasticsearch-https-required/elasticsearch-https-required.policy.hclasset1,132 bytesexamples/conversion/elasticsearch-https-required/elasticsearch-https-required.sentinelasset2,352 bytesexamples/conversion/elasticsearch-in-vpc-only/README.mddoc890 bytesexamples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.policy.hclasset589 bytesexamples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.sentinelasset1,935 bytesexamples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/README.mddoc1,103 bytesexamples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.policy.hclasset845 bytesexamples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.sentinelasset2,125 bytesexamples/conversion/s3-block-public-access-bucket-level/README.mddoc1,123 bytesexamples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.policy.hclasset1,184 bytesexamples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.sentinelasset3,304 bytesexamples/conversion/s3-bucket-should-have-object-lock-enabled/README.mddoc975 bytesexamples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.policy.hclasset1,030 bytesexamples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.sentinelasset2,868 bytesexamples/conversion/secretsmanager-auto-rotation-enabled-check/README.mddoc955 bytesexamples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.policy.hclasset867 bytesexamples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.sentinelasset2,250 bytesexamples/conversion/step-functions-state-machine-logging-enabled/README.mddoc778 bytesexamples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.policy.hclasset724 bytesexamples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.sentinelasset1,594 bytesreferences/tfpolicy-author.mddoc104,578 bytesreferences/tfpolicy-test.mddoc47,617 bytesreferences/verified-syntax.mddoc103,651 bytes
Read SKILL.md
# terraform-policy
**UTILITY SKILL** — INVOKES: [tfpolicy-author](references/tfpolicy-author.md) | [tfpolicy-test](references/tfpolicy-test.md)
## USE FOR:
- Writing a new `.policy.hcl` policy from a description or requirement
- Converting a `.sentinel` policy to Terraform Policy
- Writing or debugging a `.policytest.hcl` test file
- Migrating a Sentinel policy library to Terraform Policy
Before giving authoring or testing instructions, check the installed `tfpolicy` CLI version and tailor guidance accordingly. This skill maintains guidance for the two most recent minor lines, `0.4.x` and `0.5.x`. The `0.3.x` bullet below is baseline guidance that applies to every supported line. When a new minor ships, drop the oldest line and add the new one. Inline notes for versions earlier than `0.3.0` are retained only for older CLIs.
- If the CLI is `0.3.x` (baseline), include a top-level `policy { required_providers { ... } }` block when authoring `.policy.hcl` files containing resource or provider policies. It is mandatory for `tfpolicy validate`; version-range validation is best effort, and wildcard targets such as `resource_policy "*"` are not schema-validated. Every mock `resource {}` block in `.policytest.hcl` files must declare `attrs` or `prior_attrs`; if both evaluate to empty, the test case is skipped (`provider {}` and `module {}` mocks are unaffected) (see [tfpolicy-test](references/tfpolicy-test.md#every-resource--mock-must-declare-a-non-empty-state-block-tfpolicy-030)). `tfpolicy test` reuses the target `.policy.hcl`'s existing top-level `policy { required_providers { ... } }` block (there is no separate `.policytest.hcl`-level declaration) to validate provider, resource, and data-source policies and `core::getdatasource()`/`core::getresources()` arguments against resolved provider schemas before any test runs, failing the whole run on a schema mismatch (see [tfpolicy-test](references/tfpolicy-test.md#test-execution-behavior)). `core::alltrue(list)` and `core::anytrue(list)` are available — prefer them over the `core::length()` list-comprehension workaround (see [tfpolicy-author](references/tfpolicy-author.md#core-functions--common-idioms)). `meta.tfe_stack` and `meta.tfe_workspace.tags` are available to resource, provider, and module policies; Stack fields are empty strings outside Stack evaluations on 0.3.x and 0.4.x (`null` on 0.5.x+, see below). On 0.3.x only, the `no-op` operation does not exist: resource policies evaluate only resources that the run creates, updates, or deletes, and the default `operations` is `["create", "update"]`.
- If the CLI is `0.4.x` or newer, all `0.3.x` guidance still applies except the `operations` default, plus the `no-op` operation, which evaluates resources that the run leaves unchanged (the entire state). `operations` accepts `"create"`, `"update"`, `"delete"`, and `"no-op"`. For policies that do not reference `prior_attrs`, the default `operations` is now `["create", "update", "no-op"]`, so omitting it evaluates every resource in state. Use `operations = ["create", "update"]` to evaluate only changed resources. `no-op` exposes the existing values through `attrs`, and `prior_attrs` is unavailable. `delete` cannot be combined with `create` or `no-op` (`["update", "delete"]` is valid), and `prior_attrs` policies must set `operations` explicitly. Attrs-only policies (no `prior_attrs`) calling `core::getresources` whose `operations` omit `no-op` load with a warning; do not add `no-op` to a `prior_attrs` policy, which fails validation. In tests, set `meta.operation = "no-op"` explicitly because it is never inferred (see [tfpolicy-author](references/tfpolicy-author.md#operation-scoping-and-prior_attrs) and [tfpolicy-test](references/tfpolicy-test.md#testing-operation-aware-policies)).terraform-search-import
When your agent uses it
Discover existing cloud resources using Terraform Search queries and bulk import them into Terraform management. Use when bringing unmanaged infrastructure under Terraform control, auditing cloud resources, or migrating to IaC.
What it loads into context
Frontmatter
89 tokensAlways available to the agent
SKILL.md
2,350 tokensWhen the skill is activated
Reference documents
616 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use
- IMPORTANT: Check Provider Support First
- Decision Tree
- Prerequisites
- Terraform Search Workflow (Supported Resources Only)
- Query File Structure
- List Block Syntax
- Supported List Resources
- Query Examples
- Running Queries
- Query Output Format
- Generated Configuration
- Post-Generation Cleanup
- Import by Identity
- Verifying Imported State
- Best Practices
- Troubleshooting
- Complete Example
Scripts executed separately
scripts/list_resources.sh
Files
SKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesSKILL.mdcore9,927 bytesreferences/MANUAL-IMPORT.mddoc2,449 bytesscripts/list_resources.shruns1,231 bytes
Read SKILL.md
# Terraform Search and Bulk Import
Discover existing cloud resources using declarative queries and generate configuration for bulk import into Terraform state.
**References:**
- [Terraform Search - list block](https://developer.hashicorp.com/terraform/language/block/tfquery/list)
- [Bulk Import](https://developer.hashicorp.com/terraform/language/import/bulk)
## When to Use
- Bringing unmanaged resources under Terraform control
- Auditing existing cloud infrastructure
- Migrating from manual provisioning to IaC
- Discovering resources across multiple regions/accountsterraform-stacks
When your agent uses it
Comprehensive guide for working with HashiCorp Terraform Stacks. Use when creating, modifying, or validating Terraform Stack configurations (.tfcomponent.hcl, .tfdeploy.hcl files), working with stack components and deployments from local modules, public registry, or private registry sources, managing multi-region or multi-environment infrastructure, or troubleshooting Terraform Stacks syntax and structure.
What it loads into context
Frontmatter
109 tokensAlways available to the agent
SKILL.md
3,715 tokensWhen the skill is activated
Reference documents
21,696 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Concepts
- File Structure
- Required Terraform version (.terraform-version)
- Component Configuration (.tfcomponent.hcl)
- Deployment Configuration (.tfdeploy.hcl)
- Terraform Stacks CLI
- Monitoring Deployments with HCP Terraform API
- Common Patterns
- Best Practices
- Troubleshooting
- References
Files
SKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesSKILL.mdcore17,274 bytesreferences/api-monitoring.mddoc16,608 bytesreferences/component-blocks.mddoc10,147 bytesreferences/deployment-blocks.mddoc8,863 bytesreferences/examples.mddoc30,727 bytesreferences/linked-stacks.mddoc4,341 bytesreferences/troubleshooting.mddoc16,711 bytes
Read SKILL.md
# Terraform Stacks
Terraform Stacks simplify infrastructure provisioning and management at scale by providing a configuration layer above traditional Terraform modules. Stacks enable declarative orchestration of multiple components across environments, regions, and cloud accounts.
## Core Concepts
**Stack**: A complete unit of infrastructure composed of components and deployments that can be managed together.
**Component**: An abstraction around a Terraform module that defines infrastructure pieces. Each component specifies a source module, inputs, and providers.
**Deployment**: An instance of all components in a stack with specific input values. Use deployments for different environments (dev/staging/prod), regions, or cloud accounts.
**Stack Language**: A separate HCL-based language (not regular Terraform HCL) with distinct blocks and file extensions.
terraform-style-guide
When your agent uses it
Generate Terraform HCL code following HashiCorp's official style conventions and best practices. Use when writing, reviewing, or generating Terraform configurations.
What it loads into context
Frontmatter
43 tokensAlways available to the agent
SKILL.md
1,748 tokensWhen the skill is activated
Reference documents
1,143 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Code Generation Strategy
- File Organization
- Code Formatting
- Naming Conventions
- Variables
- Outputs
- Dynamic Resource Creation
- Security Best Practices
- Version Pinning
- Provider Configuration
- Version Control
- Validation Tools
- Code Review Checklist
Files
SECURITY.mddoc4,872 bytesSKILL.mdcore6,963 bytesSKILL.mdcore6,963 bytesSKILL.mdcore6,963 bytesSKILL.mdcore6,963 bytes
Read SKILL.md
# Terraform Style Guide
Generate and maintain Terraform code following HashiCorp's official style conventions and best practices.
**Reference:** [HashiCorp Terraform Style Guide](https://developer.hashicorp.com/terraform/language/style)
## Code Generation Strategy
When generating Terraform code:
1. Start with provider configuration and version constraints
2. Create data sources before dependent resources
3. Build resources in dependency order
4. Add outputs for key resource attributesterraform-test
When your agent uses it
Comprehensive guide for writing and running Terraform tests. Use when creating test files (.tftest.hcl), writing test scenarios with run blocks, validating infrastructure behavior with assertions, mocking providers and data sources, testing module outputs and resource configurations, or troubleshooting Terraform test syntax and execution.
What it loads into context
Frontmatter
91 tokensAlways available to the agent
SKILL.md
2,712 tokensWhen the skill is activated
Reference documents
3,676 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Reference Files
- Core Concepts
- File Structure
- Test File Structure
- Run Block
- Common Test Patterns
- Cleanup
- Running Tests
- Best Practices
- Troubleshooting
- References
Files
SKILL.mdcore11,148 bytesSKILL.mdcore11,148 bytesSKILL.mdcore11,148 bytesSKILL.mdcore11,148 bytesSKILL.mdcore11,148 bytesreferences/CI_CD.mddoc1,931 bytesreferences/EXAMPLES.mddoc6,609 bytesreferences/MOCK_PROVIDERS.mddoc4,519 bytes
Read SKILL.md
# Terraform Test
Terraform's built-in testing framework validates that configuration updates don't introduce breaking changes. Tests run against temporary resources, protecting existing infrastructure and state files.
## Reference Files
- `references/MOCK_PROVIDERS.md` — Mock provider syntax, common defaults, when to use mocks (Terraform 1.7.0+ only — skip if the user's version is below 1.7)
- `references/CI_CD.md` — GitHub Actions and GitLab CI pipeline examples
- `references/EXAMPLES.md` — Complete example test suite (unit, integration, and mock tests for a VPC module)
Read the relevant reference file when the user asks about mocking, CI/CD integration, or wants a full example.
## Core Concepts
Skills included
- aws-ami-builder
- azure-image-builder
- push-to-registry
- windows-builder
- azure-verified-modules
- new-terraform-provider
- provider-actions
- provider-configuration
- provider-docs
- provider-ephemeral-resources
- provider-framework-migration
- provider-resources
- provider-test-patterns
- refactor-module
- run-acceptance-tests
- terraform-policy
- terraform-search-import
- terraform-stacks
- terraform-style-guide
- terraform-test
Repository facts
- License
- MPL-2.0
- Created
- Nov 8, 2025
- Last pushed
- Nov 4, 2026
- Forks
- 137
- Open issues
- 12
- Project activity
- Active
Rank over the last 12 weeks
Now #949 · best #625 · down 164 in 30 days
- #938 on Oct 30
- #940 on Oct 31
- #942 on Nov 1
- #947 on Nov 2
- #954 from Nov 3 to Nov 4
- #949 since Nov 5
60 earlier periods
- #641 on Aug 2
- #636 on Aug 7
- #630 on Aug 8
- #634 on Aug 9
- #662 on Aug 10
- #667 on Aug 11
- #659 on Aug 12
- #656 on Aug 13
- #653 on Aug 14
- #629 on Aug 15
- #641 on Aug 16
- #653 on Aug 17
- #656 from Aug 19 to Aug 20
- #658 on Aug 21
- #625 on Aug 22
- #655 on Aug 23
- #670 on Aug 24
- #676 on Aug 25
- #673 on Aug 27
- #692 on Aug 28
- #642 on Aug 30
- #672 on Aug 31
- #687 on Sep 1
- #674 on Sep 2
- #680 on Sep 3
- #656 on Sep 4
- #648 on Sep 5
- #688 on Sep 7
- #707 on Sep 15
- #719 on Sep 16
- #721 on Sep 17
- #679 on Sep 19
- #694 on Sep 20
- #714 on Sep 21
- #730 on Sep 22
- #681 on Sep 25
- #711 on Sep 27
- #725 on Sep 28
- #759 on Sep 29
- #693 on Oct 1
- #710 on Oct 2
- #691 on Oct 3
- #721 on Oct 4
- #725 on Oct 5
- #746 on Oct 7
- #785 on Oct 8
- #752 on Oct 9
- #736 on Oct 10
- #743 on Oct 11
- #764 on Oct 13
- #775 on Oct 14
- #770 on Oct 15
- #752 on Oct 17
- #786 on Oct 19
- #793 on Oct 20
- #794 on Oct 23
- #758 on Oct 24
- #917 on Oct 25
- #930 on Oct 28
- #935 on Oct 29
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 4, 2026
Changed on Nov 4, 2026
New signal: Dangerous shell operation
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 97 notes
plugins/packer/skills/aws-ami-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/aws-ami-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/aws-ami-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/aws-ami-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/aws-ami-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/aws-ami-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/terraform/skills/terraform-policy/SKILL.md:23Analysis incomplete: physical or joined line exceeds character limitplugins/packer/skills/azure-image-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/azure-image-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/azure-image-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/azure-image-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/azure-image-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/azure-image-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/push-to-registry/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/push-to-registry/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/windows-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/packer/skills/windows-builder/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/terraform/skills/azure-verified-modules/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/terraform/skills/azure-verified-modules/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/terraform/skills/azure-verified-modules/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 10 dangerous shell commandsin 3 files: plugins/packer/skills/azure-image-builder/SKILL.md:83 plugins/packer/skills/push-to-registry/SKILL.md:67 aws-ami-builder/SKILL.md:65
- No hidden or obfuscated text
- No instruction overrides
- 99 references to secretsin 14 files: plugins/terraform/skills/new-terraform-provider/assets/provider.go:33 plugins/terraform/skills/provider-configuration/SKILL.md:55 plugins/packer/skills/azure-image-builder/SKILL.md:33 and 11 more
- No requests to vote in Hot
Show all 576 signals by file
plugins/packer/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "HashiCorp", "url": "https://github.com/hashicorp" - Network accessline 6
"name": "HashiCorp", "url": "https://github.com/hashicorp" }, - Network accessline 7
"url": "https://github.com/hashicorp" - Network accessline 8
}, "homepage": "https://developer.hashicorp.com/packer", "repository": "https://github.com/hashicorp/agent-skills", - Network accessline 9
"homepage": "https://developer.hashicorp.com/packer", - Network accessline 10
"repository": "https://github.com/hashicorp/agent-skills",
plugins/packer/skills/aws-ami-builder/SKILL.md
- Network accessline 12
**Reference:** [Amazon EBS Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/amazon/latest/components/builder/ebs) - Dangerous shell operationline 65
"sudo apt-get update", - Dangerous shell operationline 66
"sudo apt-get upgrade -y", - Access to secretsline 127
[Credential-related source omitted] - Access to secretsline 128
[Credential-related source omitted] - Access to secretsline 133
[Credential-related source omitted] - Network accessline 171
- [Amazon EBS Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/amazon/latest/components/builder/ebs) - Network accessline 172
- [AWS AMI Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIs.html)
plugins/packer/skills/azure-image-builder/SKILL.md
- Network accessline 12
**Reference:** [Azure ARM Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/azure/latest/components/builder/arm) - Network accessline 12
**Reference:** [Azure ARM Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/azure/latest/components/builder/arm) - Access to secretsline 33
[Credential-related source omitted] - Access to secretsline 33
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Dangerous shell operationline 83
"sudo apt-get update", - Dangerous shell operationline 83
"sudo apt-get update", - Dangerous shell operationline 84
"sudo apt-get upgrade -y", - Dangerous shell operationline 84
"sudo apt-get upgrade -y", - Access to secretsline 95
[Credential-related source omitted] - Access to secretsline 95
[Credential-related source omitted] - Access to secretsline 130
[Credential-related source omitted] - Access to secretsline 130
[Credential-related source omitted] - Access to secretsline 149
[Credential-related source omitted] - Access to secretsline 149
[Credential-related source omitted] - Network accessline 182
- [Azure ARM Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/azure/latest/components/builder/arm) - Network accessline 182
- [Azure ARM Builder](https://developer.hashicorp.com/packer/integrations/hashicorp/azure/latest/components/builder/arm) - Network accessline 183
- [Azure Compute Gallery](https://learn.microsoft.com/en-us/azure/virtual-machines/azure-compute-gallery) - Network accessline 183
- [Azure Compute Gallery](https://learn.microsoft.com/en-us/azure/virtual-machines/azure-compute-gallery)
plugins/packer/skills/push-to-registry/SKILL.md
- Network accessline 12
**Reference:** [HCP Packer Registry](https://developer.hashicorp.com/hcp/docs/packer) - Network accessline 12
**Reference:** [HCP Packer Registry](https://developer.hashicorp.com/hcp/docs/packer) - Dangerous shell operationline 67
"sudo apt-get update", - Dangerous shell operationline 67
"sudo apt-get update", - Dangerous shell operationline 68
"sudo apt-get upgrade -y", - Dangerous shell operationline 68
"sudo apt-get upgrade -y", - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Network accessline 203
- [HCP Packer Documentation](https://developer.hashicorp.com/hcp/docs/packer) - Network accessline 203
- [HCP Packer Documentation](https://developer.hashicorp.com/hcp/docs/packer) - Network accessline 204
- [hcp_packer_registry Block](https://developer.hashicorp.com/packer/docs/templates/hcl_templates/blocks/build/hcp_packer_registry) - Network accessline 204
- [hcp_packer_registry Block](https://developer.hashicorp.com/packer/docs/templates/hcl_templates/blocks/build/hcp_packer_registry) - Network accessline 205
- [HCP Terraform Provider](https://registry.terraform.io/providers/hashicorp/hcp/latest/docs/data-sources/packer_artifact) - Network accessline 205
- [HCP Terraform Provider](https://registry.terraform.io/providers/hashicorp/hcp/latest/docs/data-sources/packer_artifact)
plugins/packer/skills/windows-builder/SKILL.md
- Network accessline 12
**Reference:** [WinRM Communicator](https://developer.hashicorp.com/packer/docs/communicators/winrm) - Network accessline 12
**Reference:** [WinRM Communicator](https://developer.hashicorp.com/packer/docs/communicators/winrm) - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Network accessline 106
inline = [ "Set-ExecutionPolicy Bypass -Scope Process -Force", "iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))" - Network accessline 106
inline = [ "Set-ExecutionPolicy Bypass -Scope Process -Force", "iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))" - Network accessline 107
"Set-ExecutionPolicy Bypass -Scope Process -Force", "iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))" ] - Network accessline 107
"Set-ExecutionPolicy Bypass -Scope Process -Force", "iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))" ] - Network accessline 108
"iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))" - Network accessline 108
"iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))" - Network accessline 187
- [WinRM Communicator](https://developer.hashicorp.com/packer/docs/communicators/winrm) - Network accessline 187
- [WinRM Communicator](https://developer.hashicorp.com/packer/docs/communicators/winrm) - Network accessline 188
- [PowerShell Provisioner](https://developer.hashicorp.com/packer/docs/provisioners/powershell) - Network accessline 188
- [PowerShell Provisioner](https://developer.hashicorp.com/packer/docs/provisioners/powershell)
plugins/terraform/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "HashiCorp", "url": "https://github.com/hashicorp" - Network accessline 6
"name": "HashiCorp", "url": "https://github.com/hashicorp" }, - Network accessline 7
"url": "https://github.com/hashicorp" - Network accessline 8
}, "homepage": "https://developer.hashicorp.com/terraform", "repository": "https://github.com/hashicorp/agent-skills", - Network accessline 9
"homepage": "https://developer.hashicorp.com/terraform", - Network accessline 10
"repository": "https://github.com/hashicorp/agent-skills",
plugins/terraform/skills/azure-verified-modules/SKILL.md
- Network accessline 12
**References:** - [Azure Verified Modules](https://azure.github.io/Azure-Verified-Modules/) - Network accessline 12
**References:** - [Azure Verified Modules](https://azure.github.io/Azure-Verified-Modules/) - Network accessline 13
- [Azure Verified Modules](https://azure.github.io/Azure-Verified-Modules/) - Network accessline 13
- [Azure Verified Modules](https://azure.github.io/Azure-Verified-Modules/) - Network accessline 14
- [AVM Module Specifications](https://azure.github.io/Azure-Verified-Modules/specs/module-specs/) - Network accessline 14
- [AVM Module Specifications](https://azure.github.io/Azure-Verified-Modules/specs/module-specs/) - Network accessline 39
- Modules **MUST** be referenced using HashiCorp Terraform registry reference to a pinned version - Example: `source = "Azure/xxx/azurerm"` with `version = "1.2.3"` - Modules **MUST NOT** use git references (e.g., `git::https://xxx.yyy/xx - Network accessline 39
- Modules **MUST** be referenced using HashiCorp Terraform registry reference to a pinned version - Example: `source = "Azure/xxx/azurerm"` with `version = "1.2.3"` - Modules **MUST NOT** use git references (e.g., `git::https://xxx.yyy/xx - Network accessline 40
- Example: `source = "Azure/xxx/azurerm"` with `version = "1.2.3"` - Modules **MUST NOT** use git references (e.g., `git::https://xxx.yyy/xxx.git` or `github.com/xxx/yyy`) - Modules **MUST NOT** contain references to non-AVM modules - Network accessline 40
- Example: `source = "Azure/xxx/azurerm"` with `version = "1.2.3"` - Modules **MUST NOT** use git references (e.g., `git::https://xxx.yyy/xxx.git` or `github.com/xxx/yyy`) - Modules **MUST NOT** contain references to non-AVM modules - Network accessline 41
- Modules **MUST NOT** use git references (e.g., `git::https://xxx.yyy/xxx.git` or `github.com/xxx/yyy`) - Network accessline 41
- Modules **MUST NOT** use git references (e.g., `git::https://xxx.yyy/xxx.git` or `github.com/xxx/yyy`) - Network accessline 270
- Follow [HashiCorp's naming rules](https://www.terraform.io/docs/extend/best-practices/naming.html) - Network accessline 270
- Follow [HashiCorp's naming rules](https://www.terraform.io/docs/extend/best-practices/naming.html) - Network accessline 481
- Documentation **MUST** be automatically generated via [Terraform Docs](https://github.com/terraform-docs/terraform-docs) - Network accessline 481
- Documentation **MUST** be automatically generated via [Terraform Docs](https://github.com/terraform-docs/terraform-docs)
plugins/terraform/skills/new-terraform-provider/assets/main.go
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Network accessline 20
// goreleaser can pass other information to the main package, such as the specific commit // https://goreleaser.com/cookbooks/using-main.version/ - Network accessline 20
// goreleaser can pass other information to the main package, such as the specific commit // https://goreleaser.com/cookbooks/using-main.version/ - Network accessline 21
// https://goreleaser.com/cookbooks/using-main.version/ - Network accessline 21
// https://goreleaser.com/cookbooks/using-main.version/
plugins/terraform/skills/new-terraform-provider/assets/provider.go
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 33
[Credential-related source omitted] - Access to secretsline 33
[Credential-related source omitted] - Access to secretsline 34
[Credential-related source omitted] - Access to secretsline 34
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 84
[Credential-related source omitted] - Access to secretsline 84
[Credential-related source omitted] - Access to secretsline 98
[Credential-related source omitted] - Access to secretsline 98
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Access to secretsline 112
[Credential-related source omitted] - Access to secretsline 112
[Credential-related source omitted]
plugins/terraform/skills/provider-actions/SKILL.md
- Network accessline 16
**References:** - [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 16
**References:** - [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 17
- [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 17
- [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 18
- [Terraform Plugin Framework Actions](https://developer.hashicorp.com/terraform/plugin/framework/actions) - Network accessline 18
- [Terraform Plugin Framework Actions](https://developer.hashicorp.com/terraform/plugin/framework/actions) - Network accessline 478
Some providers (e.g. terraform-provider-aws) track release notes with [go-changelog](https://github.com/hashicorp/go-changelog): one file per PR - Network accessline 478
Some providers (e.g. terraform-provider-aws) track release notes with [go-changelog](https://github.com/hashicorp/go-changelog): one file per PR - Network accessline 479
[go-changelog](https://github.com/hashicorp/go-changelog): one file per PR - Network accessline 479
[go-changelog](https://github.com/hashicorp/go-changelog): one file per PR - Network accessline 510
- [Terraform Plugin Framework Documentation](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 510
- [Terraform Plugin Framework Documentation](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 511
- [Terraform Provider Development](https://developer.hashicorp.com/terraform/plugin) - Network accessline 511
- [Terraform Provider Development](https://developer.hashicorp.com/terraform/plugin) - Network accessline 512
- [terraform-plugin-framework GitHub](https://github.com/hashicorp/terraform-plugin-framework) - Network accessline 512
- [terraform-plugin-framework GitHub](https://github.com/hashicorp/terraform-plugin-framework) - Network accessline 513
- [terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) - Network accessline 513
- [terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) - Network accessline 514
- [Writing a Terraform Action (blog)](https://danielmschmidt.de/posts/2025-09-26-writing-a-terraform-action/) - Network accessline 514
- [Writing a Terraform Action (blog)](https://danielmschmidt.de/posts/2025-09-26-writing-a-terraform-action/)
plugins/terraform/skills/provider-configuration/SKILL.md
- Network accessline 26
well-designed credential provider chain is what separates a production-grade provider from a demo. The examples use a fictional `examplecloud` provider and the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework/pr - Network accessline 26
well-designed credential provider chain is what separates a production-grade provider from a demo. The examples use a fictional `examplecloud` provider and the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework/pr - Network accessline 28
and the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework/providers). - Network accessline 28
and the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework/providers). - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Network accessline 83
Resolve credentials by consulting an ordered list of sources and taking the first one that produces a **complete** set. This is the pattern the AWS provider uses via [`aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base), - Network accessline 83
Resolve credentials by consulting an ordered list of sources and taking the first one that produces a **complete** set. This is the pattern the AWS provider uses via [`aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base), - Network accessline 84
first one that produces a **complete** set. This is the pattern the AWS provider uses via [`aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base), and it generalizes to any provider. The canonical precedence, highest first: - Network accessline 84
first one that produces a **complete** set. This is the pattern the AWS provider uses via [`aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base), and it generalizes to any provider. The canonical precedence, highest first: - Network accessline 85
provider uses via [`aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base), - Network accessline 85
provider uses via [`aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base), - Access to secretsline 90
[Credential-related source omitted] - Access to secretsline 90
[Credential-related source omitted] - Access to secretsline 107
[Credential-related source omitted] - Access to secretsline 107
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 164
[Credential-related source omitted] - Access to secretsline 164
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Network accessline 187
[Credential-related source omitted] - Network accessline 187
[Credential-related source omitted] - Access to secretsline 187
[Credential-related source omitted] - Access to secretsline 187
[Credential-related source omitted] - Network accessline 188
[Credential-related source omitted] - Network accessline 188
[Credential-related source omitted] - Access to secretsline 188
[Credential-related source omitted] - Access to secretsline 188
[Credential-related source omitted] - Network accessline 189
"~/.examplecloud/credentials. See https://example.com/docs/auth.", - Network accessline 189
"~/.examplecloud/credentials. See https://example.com/docs/auth.",
plugins/terraform/skills/provider-configuration/references/case-studies.md
- Network accessline 9
The Terraform AWS provider, the AWSCC provider, and the S3 backend all resolve credentials through one shared library, [`hashicorp/aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base) - Network accessline 9
The Terraform AWS provider, the AWSCC provider, and the S3 backend all resolve credentials through one shared library, [`hashicorp/aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base) - Network accessline 10
resolve credentials through one shared library, [`hashicorp/aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base) (MPL-2.0). Its entry point `GetAwsConfig(ctx, *Config)` is the most - Network accessline 10
resolve credentials through one shared library, [`hashicorp/aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base) (MPL-2.0). Its entry point `GetAwsConfig(ctx, *Config)` is the most - Network accessline 11
[`hashicorp/aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base) - Network accessline 11
[`hashicorp/aws-sdk-go-base`](https://github.com/hashicorp/aws-sdk-go-base) - Access to secretsline 83
[Credential-related source omitted] - Access to secretsline 83
[Credential-related source omitted]
plugins/terraform/skills/provider-configuration/references/credential-chain.md
- Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 223
[Credential-related source omitted] - Access to secretsline 223
[Credential-related source omitted] - Access to secretsline 354
[Credential-related source omitted] - Access to secretsline 354
[Credential-related source omitted] - Access to secretsline 382
[Credential-related source omitted] - Access to secretsline 382
[Credential-related source omitted]
plugins/terraform/skills/provider-docs/references/hashicorp-provider-docs.md
- Network accessline 3
Source of truth for this skill: - https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 3
Source of truth for this skill: - https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 4
- https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 4
- https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 141
- Provider docs guidance: - https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 141
- Provider docs guidance: - https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 142
- https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 142
- https://developer.hashicorp.com/terraform/registry/providers/docs - Network accessline 144
- https://github.com/hashicorp/terraform-plugin-docs - Network accessline 144
- https://github.com/hashicorp/terraform-plugin-docs
plugins/terraform/skills/provider-ephemeral-resources/SKILL.md
plugins/terraform/skills/provider-framework-migration/SKILL.md
plugins/terraform/skills/provider-resources/SKILL.md
- Network accessline 27
**Use the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 27
**Use the [Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 29
resources that already exist on it; do not write new code against it. A provider can serve both during migration by muxing ([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)), - Network accessline 29
resources that already exist on it; do not write new code against it. A provider can serve both during migration by muxing ([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)), - Network accessline 30
provider can serve both during migration by muxing ([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)), so adopting the Framework never requires a big-bang rewrite. To tell which - Network accessline 30
provider can serve both during migration by muxing ([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)), so adopting the Framework never requires a big-bang rewrite. To tell which - Network accessline 31
([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)), - Network accessline 31
([terraform-plugin-mux](https://developer.hashicorp.com/terraform/plugin/mux)), - Network accessline 518
- [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 518
- [Terraform Plugin Framework](https://developer.hashicorp.com/terraform/plugin/framework) - Network accessline 519
- [Resource Development](https://developer.hashicorp.com/terraform/plugin/framework/resources) - Network accessline 519
- [Resource Development](https://developer.hashicorp.com/terraform/plugin/framework/resources) - Network accessline 520
- [Data Source Development](https://developer.hashicorp.com/terraform/plugin/framework/data-sources) - Network accessline 520
- [Data Source Development](https://developer.hashicorp.com/terraform/plugin/framework/data-sources) - Network accessline 521
- [HashiCorp Provider Design Principles](https://developer.hashicorp.com/terraform/plugin/best-practices/hashicorp-provider-design-principles) - Network accessline 521
- [HashiCorp Provider Design Principles](https://developer.hashicorp.com/terraform/plugin/best-practices/hashicorp-provider-design-principles)
plugins/terraform/skills/provider-resources/references/design-principles.md
- Network accessline 3
Distilled from HashiCorp's [Provider Design Principles](https://developer.hashicorp.com/terraform/plugin/best-practices/hashicorp-provider-design-principles) - Network accessline 3
Distilled from HashiCorp's [Provider Design Principles](https://developer.hashicorp.com/terraform/plugin/best-practices/hashicorp-provider-design-principles) - Network accessline 4
[Provider Design Principles](https://developer.hashicorp.com/terraform/plugin/best-practices/hashicorp-provider-design-principles) - Network accessline 4
[Provider Design Principles](https://developer.hashicorp.com/terraform/plugin/best-practices/hashicorp-provider-design-principles)
plugins/terraform/skills/provider-test-patterns/SKILL.md
- Network accessline 22
Patterns for writing acceptance tests using [terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) - Network accessline 22
Patterns for writing acceptance tests using [terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) - Network accessline 23
[terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) - Network accessline 23
[terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing) - Network accessline 24
with the [Plugin Framework](https://github.com/hashicorp/terraform-plugin-framework). - Network accessline 24
with the [Plugin Framework](https://github.com/hashicorp/terraform-plugin-framework). - Network accessline 26
Source: [HashiCorp Testing Patterns](https://developer.hashicorp.com/terraform/plugin/testing/testing-patterns) - Network accessline 26
Source: [HashiCorp Testing Patterns](https://developer.hashicorp.com/terraform/plugin/testing/testing-patterns) - Access to secretsline 148
[Credential-related source omitted] - Access to secretsline 148
[Credential-related source omitted] - Network accessline 163
resource.TestCheckResourceAttrSet(name, "id"), resource.TestCheckNoResourceAttr(name, "removed"), resource.TestMatchResourceAttr(name, "url", regexp.MustCompile(`^https://`)), - Network accessline 163
resource.TestCheckResourceAttrSet(name, "id"), resource.TestCheckNoResourceAttr(name, "removed"), resource.TestMatchResourceAttr(name, "url", regexp.MustCompile(`^https://`)), - Network accessline 164
resource.TestCheckNoResourceAttr(name, "removed"), resource.TestMatchResourceAttr(name, "url", regexp.MustCompile(`^https://`)), resource.TestCheckResourceAttrPair(res1, "ref_id", res2, "id"), - Network accessline 164
resource.TestCheckNoResourceAttr(name, "removed"), resource.TestMatchResourceAttr(name, "url", regexp.MustCompile(`^https://`)), resource.TestCheckResourceAttrPair(res1, "ref_id", res2, "id"), - Network accessline 165
resource.TestMatchResourceAttr(name, "url", regexp.MustCompile(`^https://`)), - Network accessline 165
resource.TestMatchResourceAttr(name, "url", regexp.MustCompile(`^https://`)), - Network accessline 273
// TestAccExample_regressionGH1234 verifies fix for https://github.com/org/repo/issues/1234 - Network accessline 273
// TestAccExample_regressionGH1234 verifies fix for https://github.com/org/repo/issues/1234 - Access to secretsline 411
[Credential-related source omitted] - Access to secretsline 411
[Credential-related source omitted] - Access to secretsline 412
[Credential-related source omitted] - Access to secretsline 412
[Credential-related source omitted]
plugins/terraform/skills/provider-test-patterns/references/checks.md
- Network accessline 6
Source: [State Checks](https://developer.hashicorp.com/terraform/plugin/testing/acceptance-tests/state-checks/resource), - Network accessline 6
Source: [State Checks](https://developer.hashicorp.com/terraform/plugin/testing/acceptance-tests/state-checks/resource), - Network accessline 7
[Plan Checks](https://developer.hashicorp.com/terraform/plugin/testing/acceptance-tests/plan-checks) - Network accessline 7
[Plan Checks](https://developer.hashicorp.com/terraform/plugin/testing/acceptance-tests/plan-checks) - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 207
[Credential-related source omitted] - Access to secretsline 207
[Credential-related source omitted]
plugins/terraform/skills/provider-test-patterns/references/ephemeral.md
- Network accessline 8
Source: [Ephemeral Resource Acceptance Tests](https://developer.hashicorp.com/terraform/plugin/testing/acceptance-tests/ephemeral-resources) - Network accessline 8
Source: [Ephemeral Resource Acceptance Tests](https://developer.hashicorp.com/terraform/plugin/testing/acceptance-tests/ephemeral-resources)
plugins/terraform/skills/provider-test-patterns/references/sweepers.md
plugins/terraform/skills/refactor-module/SKILL.md
- Network accessline 527
# Use semantic versioning for modules module "vpc" { source = "git::https://github.com/org/terraform-modules.git//vpc?ref=v1.2.0" - Network accessline 527
# Use semantic versioning for modules module "vpc" { source = "git::https://github.com/org/terraform-modules.git//vpc?ref=v1.2.0" - Network accessline 528
module "vpc" { source = "git::https://github.com/org/terraform-modules.git//vpc?ref=v1.2.0" version = "~> 1.2" - Network accessline 528
module "vpc" { source = "git::https://github.com/org/terraform-modules.git//vpc?ref=v1.2.0" version = "~> 1.2" - Network accessline 529
source = "git::https://github.com/org/terraform-modules.git//vpc?ref=v1.2.0" - Network accessline 529
source = "git::https://github.com/org/terraform-modules.git//vpc?ref=v1.2.0" - Network accessline 548
## Related Skills - [Terraform code generation](https://raw.githubusercontent.com/hashicorp/agent-skills/refs/heads/main/plugins/terraform/skills/terraform-style-guide/SKILL.md) - Style guide for the new Terraform Module - Network accessline 548
## Related Skills - [Terraform code generation](https://raw.githubusercontent.com/hashicorp/agent-skills/refs/heads/main/plugins/terraform/skills/terraform-style-guide/SKILL.md) - Style guide for the new Terraform Module - Network accessline 549
- [Terraform code generation](https://raw.githubusercontent.com/hashicorp/agent-skills/refs/heads/main/plugins/terraform/skills/terraform-style-guide/SKILL.md) - Style guide for the new Terraform Module - Network accessline 549
- [Terraform code generation](https://raw.githubusercontent.com/hashicorp/agent-skills/refs/heads/main/plugins/terraform/skills/terraform-style-guide/SKILL.md) - Style guide for the new Terraform Module - Network accessline 550
- [Azure Verified Modules](https://raw.githubusercontent.com/hashicorp/agent-skills/refs/heads/main/plugins/terraform/skills/azure-verified-modules/SKILL.md) - Recommended module specifications for Azure - Network accessline 550
- [Azure Verified Modules](https://raw.githubusercontent.com/hashicorp/agent-skills/refs/heads/main/plugins/terraform/skills/azure-verified-modules/SKILL.md) - Recommended module specifications for Azure - Network accessline 552
## Resources - [Terraform Module Development](https://developer.hashicorp.com/terraform/language/modules/develop) - Network accessline 552
## Resources - [Terraform Module Development](https://developer.hashicorp.com/terraform/language/modules/develop) - Network accessline 553
- [Terraform Module Development](https://developer.hashicorp.com/terraform/language/modules/develop) - Network accessline 553
- [Terraform Module Development](https://developer.hashicorp.com/terraform/language/modules/develop) - Network accessline 554
- [Module Best Practices](https://developer.hashicorp.com/terraform/cloud-docs/registry/design) - Network accessline 554
- [Module Best Practices](https://developer.hashicorp.com/terraform/cloud-docs/registry/design)
plugins/terraform/skills/run-acceptance-tests/SKILL.md
plugins/terraform/skills/terraform-policy/README.md
- Network accessline 3
A family of focused agent skills for working with [Terraform Policy](https://developer.hashicorp.com/terraform/cloud-docs/policy-enforcement) — HCP Terraform's native policy-as-code engine for `.policy.hcl` and `.policytest.hcl` files. - Network accessline 3
A family of focused agent skills for working with [Terraform Policy](https://developer.hashicorp.com/terraform/cloud-docs/policy-enforcement) — HCP Terraform's native policy-as-code engine for `.policy.hcl` and `.policytest.hcl` files.
plugins/terraform/skills/terraform-policy/examples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.sentinel
- Network accessline 16
const = { "policy_name": "cloudfront-associated-with-waf", "message": "'aws_cloudfront_distribution' are associated with either AWS WAF Classic or AWS WAF web ACLs. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/clo - Network accessline 16
const = { "policy_name": "cloudfront-associated-with-waf", "message": "'aws_cloudfront_distribution' are associated with either AWS WAF Classic or AWS WAF web ACLs. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/clo - Network accessline 17
"policy_name": "cloudfront-associated-with-waf", "message": "'aws_cloudfront_distribution' are associated with either AWS WAF Classic or AWS WAF web ACLs. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/cloudfront-con - Network accessline 17
"policy_name": "cloudfront-associated-with-waf", "message": "'aws_cloudfront_distribution' are associated with either AWS WAF Classic or AWS WAF web ACLs. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/cloudfront-con - Network accessline 18
"message": "'aws_cloudfront_distribution' are associated with either AWS WAF Classic or AWS WAF web ACLs. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/cloudfront-controls.html#cloudfront-6 for more details.", - Network accessline 18
"message": "'aws_cloudfront_distribution' are associated with either AWS WAF Classic or AWS WAF web ACLs. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/cloudfront-controls.html#cloudfront-6 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.sentinel
- Network accessline 17
"resource_aws_cloudtrail": "aws_cloudtrail", "policy_name": "cloudtrail-server-side-encryption-enabled", "message": "Attribute 'kms_key_id' must be present for 'aws_cloudtrail' resources - Network accessline 17
"resource_aws_cloudtrail": "aws_cloudtrail", "policy_name": "cloudtrail-server-side-encryption-enabled", "message": "Attribute 'kms_key_id' must be present for 'aws_cloudtrail' resources - Network accessline 18
"policy_name": "cloudtrail-server-side-encryption-enabled", "message": "Attribute 'kms_key_id' must be present for 'aws_cloudtrail' resources. Refer to https://docs.aws.amazon.com/securityhub/lat - Network accessline 18
"policy_name": "cloudtrail-server-side-encryption-enabled", "message": "Attribute 'kms_key_id' must be present for 'aws_cloudtrail' resources. Refer to https://docs.aws.amazon.com/securityhub/lat - Network accessline 19
"message": "Attribute 'kms_key_id' must be present for 'aws_cloudtrail' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/cloudtrail-controls.html#cloudtrail-2 for more details.", - Network accessline 19
"message": "Attribute 'kms_key_id' must be present for 'aws_cloudtrail' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/cloudtrail-controls.html#cloudtrail-2 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.sentinel
- Network accessline 14
const = { "policy_name": "dms-endpoint-should-be-ssl-configured", "message": "Attribute 'certificate_arn' shouldn't be empty for AWS DMS Endpoint. Refer to https://docs.aws.amazon.com/securityhub/latest/use - Network accessline 14
const = { "policy_name": "dms-endpoint-should-be-ssl-configured", "message": "Attribute 'certificate_arn' shouldn't be empty for AWS DMS Endpoint. Refer to https://docs.aws.amazon.com/securityhub/latest/use - Network accessline 15
"policy_name": "dms-endpoint-should-be-ssl-configured", "message": "Attribute 'certificate_arn' shouldn't be empty for AWS DMS Endpoint. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/dms- - Network accessline 15
"policy_name": "dms-endpoint-should-be-ssl-configured", "message": "Attribute 'certificate_arn' shouldn't be empty for AWS DMS Endpoint. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/dms- - Network accessline 16
"message": "Attribute 'certificate_arn' shouldn't be empty for AWS DMS Endpoint. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/dms-controls.html#dms-9 for more details.", - Network accessline 16
"message": "Attribute 'certificate_arn' shouldn't be empty for AWS DMS Endpoint. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/dms-controls.html#dms-9 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.sentinel
- Network accessline 16
const = { "policy_name": "dms-ssl-enabled", "message": "Attribute 'ssl_mode' must be set to one of: require, verify-ca, verify-full for 'aws_dms_endpoint' resources. Refer to https://docs.aws.amazon.com/sec - Network accessline 16
const = { "policy_name": "dms-ssl-enabled", "message": "Attribute 'ssl_mode' must be set to one of: require, verify-ca, verify-full for 'aws_dms_endpoint' resources. Refer to https://docs.aws.amazon.com/sec - Network accessline 17
"policy_name": "dms-ssl-enabled", "message": "Attribute 'ssl_mode' must be set to one of: require, verify-ca, verify-full for 'aws_dms_endpoint' resources. Refer to https://docs.aws.amazon.com/securityhub/la - Network accessline 17
"policy_name": "dms-ssl-enabled", "message": "Attribute 'ssl_mode' must be set to one of: require, verify-ca, verify-full for 'aws_dms_endpoint' resources. Refer to https://docs.aws.amazon.com/securityhub/la - Network accessline 18
"message": "Attribute 'ssl_mode' must be set to one of: require, verify-ca, verify-full for 'aws_dms_endpoint' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/dms-controls.html#dms-9 for more d - Network accessline 18
"message": "Attribute 'ssl_mode' must be set to one of: require, verify-ca, verify-full for 'aws_dms_endpoint' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/dms-controls.html#dms-9 for more d
plugins/terraform/skills/terraform-policy/examples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.sentinel
- Network accessline 17
const = { "policy_name": "ec2-network-acl-should-have-subnet-ids", "message": "Attribute 'subnet_ids' must be present for 'aws_network_acl' resources or it should include 'subnet_ids' - Network accessline 17
const = { "policy_name": "ec2-network-acl-should-have-subnet-ids", "message": "Attribute 'subnet_ids' must be present for 'aws_network_acl' resources or it should include 'subnet_ids' - Network accessline 18
"policy_name": "ec2-network-acl-should-have-subnet-ids", "message": "Attribute 'subnet_ids' must be present for 'aws_network_acl' resources or it should include 'subnet_ids' through 'aw - Network accessline 18
"policy_name": "ec2-network-acl-should-have-subnet-ids", "message": "Attribute 'subnet_ids' must be present for 'aws_network_acl' resources or it should include 'subnet_ids' through 'aw - Network accessline 19
"message": "Attribute 'subnet_ids' must be present for 'aws_network_acl' resources or it should include 'subnet_ids' through 'aws_network_acl_association'. Refer to https://docs.aws.amazon.com/securityhub/latest - Network accessline 19
"message": "Attribute 'subnet_ids' must be present for 'aws_network_acl' resources or it should include 'subnet_ids' through 'aws_network_acl_association'. Refer to https://docs.aws.amazon.com/securityhub/latest
plugins/terraform/skills/terraform-policy/examples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.sentinel
- Network accessline 16
const = { "message": "VPC default security group should not allow inbound and outbound traffic. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-2 for more details.", - Network accessline 16
const = { "message": "VPC default security group should not allow inbound and outbound traffic. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-2 for more details.", - Network accessline 17
"message": "VPC default security group should not allow inbound and outbound traffic. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-2 for more details.", - Network accessline 17
"message": "VPC default security group should not allow inbound and outbound traffic. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-2 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.sentinel
- Network accessline 16
const = { "policy_name": "efs-access-point-should-enforce-user-identity", "message": "Attribute 'posix_user' should be defined for 'aws_efs_access_point' resources. Refer to https://docs.aws.amazon. - Network accessline 16
const = { "policy_name": "efs-access-point-should-enforce-user-identity", "message": "Attribute 'posix_user' should be defined for 'aws_efs_access_point' resources. Refer to https://docs.aws.amazon. - Network accessline 17
"policy_name": "efs-access-point-should-enforce-user-identity", "message": "Attribute 'posix_user' should be defined for 'aws_efs_access_point' resources. Refer to https://docs.aws.amazon.com/securit - Network accessline 17
"policy_name": "efs-access-point-should-enforce-user-identity", "message": "Attribute 'posix_user' should be defined for 'aws_efs_access_point' resources. Refer to https://docs.aws.amazon.com/securit - Network accessline 18
"message": "Attribute 'posix_user' should be defined for 'aws_efs_access_point' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/efs-controls.html#efs-4 for more details.", - Network accessline 18
"message": "Attribute 'posix_user' should be defined for 'aws_efs_access_point' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/efs-controls.html#efs-4 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.sentinel
- Network accessline 37
"address": v.address, "module_address": v.module_address, "message": "Attribute 'transit_encryption_enabled' must be true for 'aws_elasticache_replication_group' resources.Refer to https://docs.aws.amazon.com/securityhub - Network accessline 37
"address": v.address, "module_address": v.module_address, "message": "Attribute 'transit_encryption_enabled' must be true for 'aws_elasticache_replication_group' resources.Refer to https://docs.aws.amazon.com/securityhub - Network accessline 38
"module_address": v.module_address, "message": "Attribute 'transit_encryption_enabled' must be true for 'aws_elasticache_replication_group' resources.Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/elasticache-co - Network accessline 38
"module_address": v.module_address, "message": "Attribute 'transit_encryption_enabled' must be true for 'aws_elasticache_replication_group' resources.Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/elasticache-co - Network accessline 39
"message": "Attribute 'transit_encryption_enabled' must be true for 'aws_elasticache_replication_group' resources.Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/elasticache-controls.html#elasticache-5 for more deta - Network accessline 39
"message": "Attribute 'transit_encryption_enabled' must be true for 'aws_elasticache_replication_group' resources.Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/elasticache-controls.html#elasticache-5 for more deta
plugins/terraform/skills/terraform-policy/examples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.sentinel
- Network accessline 15
const = { "policy_name": "elasticsearch-encrypted-at-rest", "message": "Attribute 'enabled' must be set to true for the attribute 'encrypt_at_rest' for 'aws_elasticsearch_domain' resources. - Network accessline 15
const = { "policy_name": "elasticsearch-encrypted-at-rest", "message": "Attribute 'enabled' must be set to true for the attribute 'encrypt_at_rest' for 'aws_elasticsearch_domain' resources. - Network accessline 16
"policy_name": "elasticsearch-encrypted-at-rest", "message": "Attribute 'enabled' must be set to true for the attribute 'encrypt_at_rest' for 'aws_elasticsearch_domain' resources. Refer to ht - Network accessline 16
"policy_name": "elasticsearch-encrypted-at-rest", "message": "Attribute 'enabled' must be set to true for the attribute 'encrypt_at_rest' for 'aws_elasticsearch_domain' resources. Refer to ht - Network accessline 17
"message": "Attribute 'enabled' must be set to true for the attribute 'encrypt_at_rest' for 'aws_elasticsearch_domain' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/es-controls.html#e - Network accessline 17
"message": "Attribute 'enabled' must be set to true for the attribute 'encrypt_at_rest' for 'aws_elasticsearch_domain' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/es-controls.html#e
plugins/terraform/skills/terraform-policy/examples/conversion/elasticsearch-https-required/elasticsearch-https-required.sentinel
- Network accessline 18
const = { "policy_name": "elasticsearch-https-required", "message": "Attribute 'tls_security_policy' must be set to latest policy that is 'Policy-Min-TLS-1-2-PFS-2023-10' and 'enforce_https' - Network accessline 18
const = { "policy_name": "elasticsearch-https-required", "message": "Attribute 'tls_security_policy' must be set to latest policy that is 'Policy-Min-TLS-1-2-PFS-2023-10' and 'enforce_https' - Network accessline 19
"policy_name": "elasticsearch-https-required", "message": "Attribute 'tls_security_policy' must be set to latest policy that is 'Policy-Min-TLS-1-2-PFS-2023-10' and 'enforce_https' set to tru - Network accessline 19
"policy_name": "elasticsearch-https-required", "message": "Attribute 'tls_security_policy' must be set to latest policy that is 'Policy-Min-TLS-1-2-PFS-2023-10' and 'enforce_https' set to tru - Network accessline 20
"message": "Attribute 'tls_security_policy' must be set to latest policy that is 'Policy-Min-TLS-1-2-PFS-2023-10' and 'enforce_https' set to true for the attribute 'domain_endpoint_options' for 'aws_elasticsearch_d - Network accessline 20
"message": "Attribute 'tls_security_policy' must be set to latest policy that is 'Policy-Min-TLS-1-2-PFS-2023-10' and 'enforce_https' set to true for the attribute 'domain_endpoint_options' for 'aws_elasticsearch_d
plugins/terraform/skills/terraform-policy/examples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.sentinel
- Network accessline 15
const = { "policy_name": "elasticsearch-in-vpc-only", "message": "Attribute 'subnet_ids' should not be empty for the attribute 'vpc_options' for 'aws_elasticsearch_domain' resources. Refer t - Network accessline 15
const = { "policy_name": "elasticsearch-in-vpc-only", "message": "Attribute 'subnet_ids' should not be empty for the attribute 'vpc_options' for 'aws_elasticsearch_domain' resources. Refer t - Network accessline 16
"policy_name": "elasticsearch-in-vpc-only", "message": "Attribute 'subnet_ids' should not be empty for the attribute 'vpc_options' for 'aws_elasticsearch_domain' resources. Refer to https://d - Network accessline 16
"policy_name": "elasticsearch-in-vpc-only", "message": "Attribute 'subnet_ids' should not be empty for the attribute 'vpc_options' for 'aws_elasticsearch_domain' resources. Refer to https://d - Network accessline 17
"message": "Attribute 'subnet_ids' should not be empty for the attribute 'vpc_options' for 'aws_elasticsearch_domain' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/es-controls.html#es - Network accessline 17
"message": "Attribute 'subnet_ids' should not be empty for the attribute 'vpc_options' for 'aws_elasticsearch_domain' resources. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/es-controls.html#es
plugins/terraform/skills/terraform-policy/examples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.sentinel
- Network accessline 17
const = { "policy_name": "eventbridge-custom-event-bus-should-have-attached-policy", "message": "Policy should be attached for 'aws_cloudwatch_event_bus' resource. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/even - Network accessline 17
const = { "policy_name": "eventbridge-custom-event-bus-should-have-attached-policy", "message": "Policy should be attached for 'aws_cloudwatch_event_bus' resource. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/even - Network accessline 18
"policy_name": "eventbridge-custom-event-bus-should-have-attached-policy", "message": "Policy should be attached for 'aws_cloudwatch_event_bus' resource. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/eventbridge-con - Network accessline 18
"policy_name": "eventbridge-custom-event-bus-should-have-attached-policy", "message": "Policy should be attached for 'aws_cloudwatch_event_bus' resource. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/eventbridge-con - Network accessline 19
"message": "Policy should be attached for 'aws_cloudwatch_event_bus' resource. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/eventbridge-controls.html#eventbridge-3 for more details.", - Network accessline 19
"message": "Policy should be attached for 'aws_cloudwatch_event_bus' resource. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/eventbridge-controls.html#eventbridge-3 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.sentinel
- Network accessline 21
"module_address": "module_address", "address": "address", "message": "Bucket level Amazon S3 block public access settings are not compliant. - Network accessline 21
"module_address": "module_address", "address": "address", "message": "Bucket level Amazon S3 block public access settings are not compliant. - Network accessline 22
"address": "address", "message": "Bucket level Amazon S3 block public access settings are not compliant. Refer to https://docs.aws.amazon.com/securityhub/latest/userguid - Network accessline 22
"address": "address", "message": "Bucket level Amazon S3 block public access settings are not compliant. Refer to https://docs.aws.amazon.com/securityhub/latest/userguid - Network accessline 23
"message": "Bucket level Amazon S3 block public access settings are not compliant. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-8 for more details.", - Network accessline 23
"message": "Bucket level Amazon S3 block public access settings are not compliant. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-8 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.sentinel
- Network accessline 22
const = { "policy_name": "s3-bucket-should-have-object-lock-enabled", "message": "S3 Buckets should have object lock enabled. Refer to https://docs.aws.amazon.c - Network accessline 22
const = { "policy_name": "s3-bucket-should-have-object-lock-enabled", "message": "S3 Buckets should have object lock enabled. Refer to https://docs.aws.amazon.c - Network accessline 23
"policy_name": "s3-bucket-should-have-object-lock-enabled", "message": "S3 Buckets should have object lock enabled. Refer to https://docs.aws.amazon.com/security - Network accessline 23
"policy_name": "s3-bucket-should-have-object-lock-enabled", "message": "S3 Buckets should have object lock enabled. Refer to https://docs.aws.amazon.com/security - Network accessline 24
"message": "S3 Buckets should have object lock enabled. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-15 for more details.", - Network accessline 24
"message": "S3 Buckets should have object lock enabled. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-15 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.sentinel
- Network accessline 17
const = { "policy_name": "secretsmanager-auto-rotation-enabled-check", "message": "Secrets Manager secrets should be configured for automatic rotation. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-c - Network accessline 17
const = { "policy_name": "secretsmanager-auto-rotation-enabled-check", "message": "Secrets Manager secrets should be configured for automatic rotation. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-c - Network accessline 18
"policy_name": "secretsmanager-auto-rotation-enabled-check", "message": "Secrets Manager secrets should be configured for automatic rotation. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-controls.htm - Network accessline 18
"policy_name": "secretsmanager-auto-rotation-enabled-check", "message": "Secrets Manager secrets should be configured for automatic rotation. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-controls.htm - Network accessline 19
"message": "Secrets Manager secrets should be configured for automatic rotation. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-controls.html#secretsmanager-1 for more details.", - Network accessline 19
"message": "Secrets Manager secrets should be configured for automatic rotation. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/secretsmanager-controls.html#secretsmanager-1 for more details.",
plugins/terraform/skills/terraform-policy/examples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.sentinel
- Network accessline 14
const = { "policy_name": "sfn-logging-enabled", "message": "AWS Step Functions state machines must have logging enabled with level set to 'ALL', 'ERROR', or 'FATAL'. Refer to https://docs.aws.amazon.com/securityhub/lat - Network accessline 14
const = { "policy_name": "sfn-logging-enabled", "message": "AWS Step Functions state machines must have logging enabled with level set to 'ALL', 'ERROR', or 'FATAL'. Refer to https://docs.aws.amazon.com/securityhub/lat - Network accessline 15
"policy_name": "sfn-logging-enabled", "message": "AWS Step Functions state machines must have logging enabled with level set to 'ALL', 'ERROR', or 'FATAL'. Refer to https://docs.aws.amazon.com/securityhub/latest/usergui - Network accessline 15
"policy_name": "sfn-logging-enabled", "message": "AWS Step Functions state machines must have logging enabled with level set to 'ALL', 'ERROR', or 'FATAL'. Refer to https://docs.aws.amazon.com/securityhub/latest/usergui - Network accessline 16
"message": "AWS Step Functions state machines must have logging enabled with level set to 'ALL', 'ERROR', or 'FATAL'. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/stepfunctions-controls.html#stepfunctions-1 - Network accessline 16
"message": "AWS Step Functions state machines must have logging enabled with level set to 'ALL', 'ERROR', or 'FATAL'. Refer to https://docs.aws.amazon.com/securityhub/latest/userguide/stepfunctions-controls.html#stepfunctions-1
plugins/terraform/skills/terraform-policy/references/tfpolicy-author.md
- Network accessline 650
> **Cross-resource policies — use the Terraform Registry to identify the parent, linking attribute, and filter value.** For any child resource type involved in a cross-resource lookup, fetch its documentation at `https://raw.githubuserconte - Network accessline 650
> **Cross-resource policies — use the Terraform Registry to identify the parent, linking attribute, and filter value.** For any child resource type involved in a cross-resource lookup, fetch its documentation at `https://raw.githubuserconte - Network accessline 772
13. Convert sets to lists before indexing: `[for item in set : item][0]`. 14. Don't use `core::try()` defaults to mask missing values that should fail the policy — use `filter` instead. 15. For cross-resource lookups where the filter value - Network accessline 772
13. Convert sets to lists before indexing: `[for item in set : item][0]`. 14. Don't use `core::try()` defaults to mask missing values that should fail the policy — use `filter` instead. 15. For cross-resource lookups where the filter value - Network accessline 773
14. Don't use `core::try()` defaults to mask missing values that should fail the policy — use `filter` instead. 15. For cross-resource lookups where the filter value is the current resource's own attribute: use an inline `core::getresources - Network accessline 773
14. Don't use `core::try()` defaults to mask missing values that should fail the policy — use `filter` instead. 15. For cross-resource lookups where the filter value is the current resource's own attribute: use an inline `core::getresources - Network accessline 774
15. For cross-resource lookups where the filter value is the current resource's own attribute: use an inline `core::getresources()` with the direct filter inside `resource_policy`. To find the correct linking attribute name and filter value - Network accessline 774
15. For cross-resource lookups where the filter value is the current resource's own attribute: use an inline `core::getresources()` with the direct filter inside `resource_policy`. To find the correct linking attribute name and filter value - Network accessline 775
16. **Cross-resource enforcement — registry check determines the structure unconditionally:** - **First, verify every resource type via the Terraform Registry.** For any resource type involved in a cross-resource check, fetch `https://r - Network accessline 775
16. **Cross-resource enforcement — registry check determines the structure unconditionally:** - **First, verify every resource type via the Terraform Registry.** For any resource type involved in a cross-resource check, fetch `https://r - Network accessline 776
- **First, verify every resource type via the Terraform Registry.** For any resource type involved in a cross-resource check, fetch `https://raw.githubusercontent.com/hashicorp/terraform-provider-aws/main/website/docs/r/{resource_name_witho - Network accessline 776
- **First, verify every resource type via the Terraform Registry.** For any resource type involved in a cross-resource check, fetch `https://raw.githubusercontent.com/hashicorp/terraform-provider-aws/main/website/docs/r/{resource_name_witho
plugins/terraform/skills/terraform-policy/references/verified-syntax.md
- Network accessline 527
> **Dependent child resources — use inline filter, verify via Terraform Registry.** Before writing a direct `resource_policy "child_type"` block or a top-level cache for a cross-resource lookup, fetch the Terraform Registry documentation fo - Network accessline 527
> **Dependent child resources — use inline filter, verify via Terraform Registry.** Before writing a direct `resource_policy "child_type"` block or a top-level cache for a cross-resource lookup, fetch the Terraform Registry documentation fo - Network accessline 528
> - URL pattern: `https://raw.githubusercontent.com/hashicorp/terraform-provider-aws/main/website/docs/r/{resource_name_without_aws_prefix}.html.markdown` - Network accessline 528
> - URL pattern: `https://raw.githubusercontent.com/hashicorp/terraform-provider-aws/main/website/docs/r/{resource_name_without_aws_prefix}.html.markdown` - Access to secretsline 1583
[Credential-related source omitted] - Access to secretsline 1583
[Credential-related source omitted] - Access to secretsline 1586
[Credential-related source omitted] - Access to secretsline 1586
[Credential-related source omitted] - Access to secretsline 1587
[Credential-related source omitted] - Access to secretsline 1587
[Credential-related source omitted]
plugins/terraform/skills/terraform-search-import/SKILL.md
- Network accessline 15
**References:** - [Terraform Search - list block](https://developer.hashicorp.com/terraform/language/block/tfquery/list) - Network accessline 15
**References:** - [Terraform Search - list block](https://developer.hashicorp.com/terraform/language/block/tfquery/list) - Network accessline 16
- [Terraform Search - list block](https://developer.hashicorp.com/terraform/language/block/tfquery/list) - Network accessline 16
- [Terraform Search - list block](https://developer.hashicorp.com/terraform/language/block/tfquery/list) - Network accessline 17
- [Bulk Import](https://developer.hashicorp.com/terraform/language/import/bulk) - Network accessline 17
- [Bulk Import](https://developer.hashicorp.com/terraform/language/import/bulk)
plugins/terraform/skills/terraform-search-import/scripts/list_resources.sh
- Executable scriptline 1
#!/bin/bash - Executable scriptline 1
#!/bin/bash - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted]
plugins/terraform/skills/terraform-stacks/SKILL.md
- Network accessline 52
- Public registry: `terraform-aws-modules/vpc/aws` - Private registry: `app.terraform.io/<org-name>/vpc/aws` - Git: `git::https://github.com/org/repo.git//path?ref=v1.0.0` - Network accessline 52
- Public registry: `terraform-aws-modules/vpc/aws` - Private registry: `app.terraform.io/<org-name>/vpc/aws` - Git: `git::https://github.com/org/repo.git//path?ref=v1.0.0` - Network accessline 54
- Git: `git::https://github.com/org/repo.git//path?ref=v1.0.0` - Network accessline 54
- Git: `git::https://github.com/org/repo.git//path?ref=v1.0.0` - Network accessline 155
Configure workload identity using `identity_token` blocks and `assume_role_with_web_identity` in provider configuration. For detailed setup instructions for AWS, Azure, and GCP, see: https://developer.hashicorp.com/terraform/cloud-docs/dyna - Network accessline 155
Configure workload identity using `identity_token` blocks and `assume_role_with_web_identity` in provider configuration. For detailed setup instructions for AWS, Azure, and GCP, see: https://developer.hashicorp.com/terraform/cloud-docs/dyna - Network accessline 432
- Use artifacts endpoint to retrieve Stack outputs: `GET /api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-description` - Diagnostics endpoint requires `stack_deployment_step_id` query parameter - Artifacts endpoint returns HTTP - Network accessline 432
- Use artifacts endpoint to retrieve Stack outputs: `GET /api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-description` - Diagnostics endpoint requires `stack_deployment_step_id` query parameter - Artifacts endpoint returns HTTP - Network accessline 434
- Artifacts endpoint returns HTTP 307 redirect (use `curl -L`) - Network accessline 434
- Artifacts endpoint returns HTTP 307 redirect (use `curl -L`)
plugins/terraform/skills/terraform-stacks/references/api-monitoring.md
- Access to secretsline 38
[Credential-related source omitted] - Access to secretsline 38
[Credential-related source omitted] - Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 39
[Credential-related source omitted] - Network accessline 64
[Credential-related source omitted] - Network accessline 64
[Credential-related source omitted] - Network accessline 66
"https://app.terraform.io/api/v2/stack-configurations/{configuration-id}" | jq '.' - Network accessline 66
"https://app.terraform.io/api/v2/stack-configurations/{configuration-id}" | jq '.' - Network accessline 103
[Credential-related source omitted] - Network accessline 103
[Credential-related source omitted] - Network accessline 105
"https://app.terraform.io/api/v2/stack-configurations/{configuration-id}/stack-deployment-group-summaries" | jq '.' - Network accessline 105
"https://app.terraform.io/api/v2/stack-configurations/{configuration-id}/stack-deployment-group-summaries" | jq '.' - Network accessline 146
[Credential-related source omitted] - Network accessline 146
[Credential-related source omitted] - Network accessline 148
"https://app.terraform.io/api/v2/stack-deployment-groups/{group-id}/stack-deployment-runs" | jq '.' - Network accessline 148
"https://app.terraform.io/api/v2/stack-deployment-groups/{group-id}/stack-deployment-runs" | jq '.' - Network accessline 184
[Credential-related source omitted] - Network accessline 184
[Credential-related source omitted] - Network accessline 186
"https://app.terraform.io/api/v2/stack-deployment-runs/{run-id}/stack-deployment-steps" | jq '.' - Network accessline 186
"https://app.terraform.io/api/v2/stack-deployment-runs/{run-id}/stack-deployment-steps" | jq '.' - Network accessline 236
[Credential-related source omitted] - Network accessline 236
[Credential-related source omitted] - Network accessline 238
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" | jq '.' - Network accessline 238
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" | jq '.' - Network accessline 314
[Credential-related source omitted] - Network accessline 314
[Credential-related source omitted] - Network accessline 315
[Credential-related source omitted] - Network accessline 315
[Credential-related source omitted] - Network accessline 316
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" | \ - Network accessline 316
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" | \ - Network accessline 319
[Credential-related source omitted] - Network accessline 319
[Credential-related source omitted] - Network accessline 320
[Credential-related source omitted] - Network accessline 320
[Credential-related source omitted] - Network accessline 321
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" | \ - Network accessline 321
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" | \ - Network accessline 331
**Important Notes:** - This endpoint returns HTTP 307 redirect - use `curl -L` to follow redirects automatically - Network accessline 331
**Important Notes:** - This endpoint returns HTTP 307 redirect - use `curl -L` to follow redirects automatically - Network accessline 332
- This endpoint returns HTTP 307 redirect - use `curl -L` to follow redirects automatically - Network accessline 332
- This endpoint returns HTTP 307 redirect - use `curl -L` to follow redirects automatically - Network accessline 340
[Credential-related source omitted] - Network accessline 340
[Credential-related source omitted] - Network accessline 341
"https://app.terraform.io/api/v2/stack-deployment-steps/{final-apply-step-id}/artifacts?name=apply-description" - Network accessline 341
"https://app.terraform.io/api/v2/stack-deployment-steps/{final-apply-step-id}/artifacts?name=apply-description" - Network accessline 352
"change": { "actions": ["no-op"], "before": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 352
"change": { "actions": ["no-op"], "before": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 353
"actions": ["no-op"], "before": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", "after": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 353
"actions": ["no-op"], "before": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", "after": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 354
"before": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 354
"before": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 355
"after": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 355
"after": "http://my-alb-123456789.us-west-2.elb.amazonaws.com", - Network accessline 380
[Credential-related source omitted] - Network accessline 380
[Credential-related source omitted] - Network accessline 381
"https://app.terraform.io/api/v2/stack-deployment-steps/{final-apply-step-id}/artifacts?name=apply-description" | \ - Network accessline 381
"https://app.terraform.io/api/v2/stack-deployment-steps/{final-apply-step-id}/artifacts?name=apply-description" | \ - Network accessline 388
alb_url: http://my-alb-123456789.us-west-2.elb.amazonaws.com - Network accessline 388
alb_url: http://my-alb-123456789.us-west-2.elb.amazonaws.com - Network accessline 418
[Credential-related source omitted] - Network accessline 418
[Credential-related source omitted] - Network accessline 419
[Credential-related source omitted] - Network accessline 419
[Credential-related source omitted] - Network accessline 420
"https://app.terraform.io/api/v2/stack-deployment-runs/{run-id}" | \ - Network accessline 420
"https://app.terraform.io/api/v2/stack-deployment-runs/{run-id}" | \ - Network accessline 476
[Credential-related source omitted] - Network accessline 476
[Credential-related source omitted] - Network accessline 478
BASE_URL="https://app.terraform.io/api/v2" - Network accessline 478
BASE_URL="https://app.terraform.io/api/v2" - Network accessline 480
[Credential-related source omitted] - Network accessline 480
[Credential-related source omitted] - Network accessline 481
[Credential-related source omitted] - Network accessline 481
[Credential-related source omitted] - Network accessline 482
[Credential-related source omitted] - Network accessline 482
[Credential-related source omitted] - Network accessline 519
[Credential-related source omitted] - Network accessline 519
[Credential-related source omitted] - Network accessline 520
[Credential-related source omitted] - Network accessline 520
[Credential-related source omitted]
plugins/terraform/skills/terraform-stacks/references/component-blocks.md
- Network accessline 221
source = "git::https://github.com/org/repo.git//modules/vpc?ref=v1.0.0" - Network accessline 221
source = "git::https://github.com/org/repo.git//modules/vpc?ref=v1.0.0" - Network accessline 227
source = "https://example.com/modules/vpc-module.tar.gz" - Network accessline 227
source = "https://example.com/modules/vpc-module.tar.gz"
plugins/terraform/skills/terraform-stacks/references/deployment-blocks.md
- Network accessline 59
**Setup Documentation:** For detailed instructions on configuring OIDC/workload identity for each cloud provider (including IAM roles, trust policies, and federated credentials), see: https://developer.hashicorp.com/terraform/cloud-docs/dyn - Network accessline 59
**Setup Documentation:** For detailed instructions on configuring OIDC/workload identity for each cloud provider (including IAM roles, trust policies, and federated credentials), see: https://developer.hashicorp.com/terraform/cloud-docs/dyn
plugins/terraform/skills/terraform-stacks/references/troubleshooting.md
- Network accessline 199
[Credential-related source omitted] - Network accessline 199
[Credential-related source omitted] - Network accessline 200
[Credential-related source omitted] - Network accessline 200
[Credential-related source omitted] - Network accessline 201
[Credential-related source omitted] - Network accessline 201
[Credential-related source omitted] - Network accessline 202
"https://app.terraform.io/api/v2/stack-deployment-runs/{run-id}/stack-deployment-steps" | \ - Network accessline 202
"https://app.terraform.io/api/v2/stack-deployment-runs/{run-id}/stack-deployment-steps" | \ - Network accessline 315
- Application ID matches the one in provider configuration - Subject matches: `organization:<org>:project:<project>:stack:<stack>:deployment:<deployment>` - Issuer is `https://app.terraform.io` - Network accessline 315
- Application ID matches the one in provider configuration - Subject matches: `organization:<org>:project:<project>:stack:<stack>:deployment:<deployment>` - Issuer is `https://app.terraform.io` - Network accessline 317
- Issuer is `https://app.terraform.io` - Network accessline 317
- Issuer is `https://app.terraform.io` - Network accessline 543
curl "https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics" - Network accessline 543
curl "https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics" - Network accessline 556
curl "https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" - Network accessline 556
curl "https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/stack-diagnostics?stack_deployment_step_id={step-id}" - Network accessline 572
[Credential-related source omitted] - Network accessline 572
[Credential-related source omitted] - Network accessline 573
[Credential-related source omitted] - Network accessline 573
[Credential-related source omitted] - Network accessline 574
"https://app.terraform.io/api/v2/stack-deployment-steps/$APPLY_STEP/artifacts?name=apply-description" | \ - Network accessline 574
"https://app.terraform.io/api/v2/stack-deployment-steps/$APPLY_STEP/artifacts?name=apply-description" | \ - Network accessline 599
[Credential-related source omitted] - Network accessline 599
[Credential-related source omitted] - Network accessline 600
[Credential-related source omitted] - Network accessline 600
[Credential-related source omitted] - Network accessline 601
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}" | \ - Network accessline 601
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}" | \ - Network accessline 604
[Credential-related source omitted] - Network accessline 604
[Credential-related source omitted] - Network accessline 605
[Credential-related source omitted] - Network accessline 605
[Credential-related source omitted] - Network accessline 606
[Credential-related source omitted] - Network accessline 606
[Credential-related source omitted] - Network accessline 607
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-description" - Network accessline 607
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-description" - Network accessline 620
[Credential-related source omitted] - Network accessline 620
[Credential-related source omitted] - Network accessline 621
[Credential-related source omitted] - Network accessline 621
[Credential-related source omitted] - Network accessline 622
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-description" - Network accessline 622
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-description" - Network accessline 624
# Python requests: allow_redirects=True (default) import requests response = requests.get(url, headers=headers, allow_redirects=True) - Network accessline 624
# Python requests: allow_redirects=True (default) import requests response = requests.get(url, headers=headers, allow_redirects=True) - Network accessline 626
response = requests.get(url, headers=headers, allow_redirects=True) - Network accessline 626
response = requests.get(url, headers=headers, allow_redirects=True) - Network accessline 628
# Node.js fetch: redirect: 'follow' (default) const response = await fetch(url, { - Network accessline 628
# Node.js fetch: redirect: 'follow' (default) const response = await fetch(url, { - Network accessline 629
const response = await fetch(url, { - Network accessline 629
const response = await fetch(url, { - Network accessline 646
[Credential-related source omitted] - Network accessline 646
[Credential-related source omitted] - Network accessline 647
[Credential-related source omitted] - Network accessline 647
[Credential-related source omitted] - Network accessline 648
[Credential-related source omitted] - Network accessline 648
[Credential-related source omitted] - Network accessline 649
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-debug-log" - Network accessline 649
"https://app.terraform.io/api/v2/stack-deployment-steps/{step-id}/artifacts?name=apply-debug-log" - Network accessline 654
If experiencing widespread issues, check HCP Terraform status page: - https://status.hashicorp.com - Network accessline 654
If experiencing widespread issues, check HCP Terraform status page: - https://status.hashicorp.com - Network accessline 655
- https://status.hashicorp.com - Network accessline 655
- https://status.hashicorp.com
plugins/terraform/skills/terraform-style-guide/SECURITY.md
- Network accessline 58
Ephemeral resources prevent sensitive data being stored in state. For more information on ephemeral resources, see the [Terraform documentation](https://developer.hashicorp.com/terraform/language/block/ephemeral). - Network accessline 58
Ephemeral resources prevent sensitive data being stored in state. For more information on ephemeral resources, see the [Terraform documentation](https://developer.hashicorp.com/terraform/language/block/ephemeral). - Network accessline 60
[Terraform documentation](https://developer.hashicorp.com/terraform/language/block/ephemeral). - Network accessline 60
[Terraform documentation](https://developer.hashicorp.com/terraform/language/block/ephemeral).
plugins/terraform/skills/terraform-style-guide/SKILL.md
- Network accessline 12
**Reference:** [HashiCorp Terraform Style Guide](https://developer.hashicorp.com/terraform/language/style) - Network accessline 12
**Reference:** [HashiCorp Terraform Style Guide](https://developer.hashicorp.com/terraform/language/style) - Network accessline 316
*Based on: [HashiCorp Terraform Style Guide](https://developer.hashicorp.com/terraform/language/style)* - Network accessline 316
*Based on: [HashiCorp Terraform Style Guide](https://developer.hashicorp.com/terraform/language/style)*
plugins/terraform/skills/terraform-test/SKILL.md
- Network accessline 450
- [Terraform Testing Documentation](https://developer.hashicorp.com/terraform/language/tests) - Network accessline 450
- [Terraform Testing Documentation](https://developer.hashicorp.com/terraform/language/tests) - Network accessline 451
- [Terraform Test Command](https://developer.hashicorp.com/terraform/cli/commands/test) - Network accessline 451
- [Terraform Test Command](https://developer.hashicorp.com/terraform/cli/commands/test)
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 470 facts
- Network access in prose of the SKILL.mdaws-ami-builder/SKILL.md:12Low confidence
- Dangerous shell operation in code of the SKILL.mdaws-ami-builder/SKILL.md:65High confidence
- Dangerous shell operation in code of the SKILL.mdaws-ami-builder/SKILL.md:66High confidence
- Access to secrets in prose of the SKILL.mdaws-ami-builder/SKILL.md:127Low confidence
- Access to secrets in prose of the SKILL.md: reads a credential storeaws-ami-builder/SKILL.md:128Low confidence
- Access to secrets in code of the SKILL.md: a variable, placeholder or call, not a stored valueaws-ami-builder/SKILL.md:133Low confidence
- Network access in prose of the SKILL.mdaws-ami-builder/SKILL.md:171Low confidence
- Network access in prose of the SKILL.mdaws-ami-builder/SKILL.md:172Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:12Low confidence
- Network access in prose of the SKILL.mdazure-image-builder/SKILL.md:12Low confidence
- Access to secrets in code of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:33High confidence
- Access to secrets in code of the SKILL.mdazure-image-builder/SKILL.md:33High confidence
- Access to secrets in code of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:57High confidence
- Access to secrets in code of the SKILL.mdazure-image-builder/SKILL.md:57High confidence
- Dangerous shell operation in code of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:83High confidence
- Dangerous shell operation in code of the SKILL.mdazure-image-builder/SKILL.md:83High confidence
- Dangerous shell operation in code of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:84High confidence
- Dangerous shell operation in code of the SKILL.mdazure-image-builder/SKILL.md:84High confidence
- Access to secrets in code of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:95High confidence
- Access to secrets in code of the SKILL.mdazure-image-builder/SKILL.md:95High confidence
- Access to secrets in code of the SKILL.md: a variable, placeholder or call, not a stored valueplugins/packer/skills/azure-image-builder/SKILL.md:130Low confidence
- Access to secrets in code of the SKILL.md: a variable, placeholder or call, not a stored valueazure-image-builder/SKILL.md:130Low confidence
- Access to secrets in code of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:149High confidence
- Access to secrets in code of the SKILL.mdazure-image-builder/SKILL.md:149High confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:182Low confidence
- Network access in prose of the SKILL.mdazure-image-builder/SKILL.md:182Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/azure-image-builder/SKILL.md:183Low confidence
- Network access in prose of the SKILL.mdazure-image-builder/SKILL.md:183Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:12Low confidence
- Network access in prose of the SKILL.mdpush-to-registry/SKILL.md:12Low confidence
- Dangerous shell operation in code of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:67High confidence
- Dangerous shell operation in code of the SKILL.mdpush-to-registry/SKILL.md:67High confidence
- Dangerous shell operation in code of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:68High confidence
- Dangerous shell operation in code of the SKILL.mdpush-to-registry/SKILL.md:68High confidence
- Access to secrets in code of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:80High confidence
- Access to secrets in code of the SKILL.mdpush-to-registry/SKILL.md:80High confidence
- Access to secrets in code of the SKILL.md: a variable, placeholder or call, not a stored valueplugins/packer/skills/push-to-registry/SKILL.md:138Low confidence
- Access to secrets in code of the SKILL.md: a variable, placeholder or call, not a stored valuepush-to-registry/SKILL.md:138Low confidence
- Access to secrets in prose of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:180Low confidence
- Access to secrets in prose of the SKILL.mdpush-to-registry/SKILL.md:180Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:203Low confidence
- Network access in prose of the SKILL.mdpush-to-registry/SKILL.md:203Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:204Low confidence
- Network access in prose of the SKILL.mdpush-to-registry/SKILL.md:204Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/push-to-registry/SKILL.md:205Low confidence
- Network access in prose of the SKILL.mdpush-to-registry/SKILL.md:205Low confidence
- Network access in prose of the SKILL.mdplugins/packer/skills/windows-builder/SKILL.md:12Low confidence
- Network access in prose of the SKILL.mdwindows-builder/SKILL.md:12Low confidence
- Access to secrets in code of the SKILL.mdplugins/packer/skills/windows-builder/SKILL.md:72High confidence
- Access to secrets in code of the SKILL.mdwindows-builder/SKILL.md:72High confidence
and 420 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md plugins/packer/skills/aws-ami-builder/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md plugins/packer/skills/aws-ami-builder/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md plugins/packer/skills/aws-ami-builder/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md plugins/packer/skills/aws-ami-builder/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/hashicorp-agent-skills/)