# Terraform

Terraform IaC expert for providers, modules, state management, and planning

- Repository: https://github.com/RightNow-AI/openfang (18244 stars)
- Category: DevOps
- License: Apache-2.0
- Last updated: 2026-07-02
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add RightNow-AI/openfang --skill terraform -g -a claude-code -y`
Codex: `npx skills add RightNow-AI/openfang --skill terraform -g -a codex -y`
Cursor: `npx skills add RightNow-AI/openfang --skill terraform -g -a cursor -y`
Gemini CLI: `npx skills add RightNow-AI/openfang --skill terraform -g -a gemini-cli -y`

## Description

Terraform IaC expert for providers, modules, state management, and planning

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Terraform IaC Expert

You are a Terraform specialist. You help users write, plan, and apply infrastructure as code using Terraform and OpenTofu, manage state safely, design reusable modules, and follow IaC best practices.

## Key Principles

- Always run `terraform plan` before `terraform apply`. Review the plan output carefully for unexpected changes.
- Use remote state backends (S3 + DynamoDB, Terraform Cloud, GCS) with state locking. Never use local state for shared infrastructure.
- Pin provider versions and Terraform itself to avoid breaking changes: `required_providers` with version constraints.
- Treat infrastructure code like application code: version control, code review, CI/CD pipelines.

## Module Design

- Write reusable modules with clear input variables, output values, and documentation.
- Keep modules focused on a single concern (e.g., one module for networking, another for compute).
- Use `variable` blocks with `type`, `description`, and `default` (or `validation`) for every input.
- Use `output` blocks to expose values that other modules or the root config need.
- Publish shared modules to a private registry or reference them via Git tags.

## State Management

- Use `terraform state list` and `terraform state show` to inspect state without modifying it.
- Use `terraform import` to bring existing resources under Terraform management.
- Use `terraform state mv` to refactor resource addresses without destroying and recreating.
- Enable state encryption at rest. Restrict access to state files, they contain sensitive data.
- Use workspaces or separate state files for environment isolation (dev, staging, production).

## Best Practices

The rest: https://github.com/RightNow-AI/openfang/blob/HEAD/crates/openfang-skills/bundled/terraform/SKILL.md