Infrastructure As Code Reviewer
Review Terraform, Pulumi & CloudFormation for security, cost, and compliance issues
What You Can Do
You can submit Terraform, Pulumi, or CloudFormation code—whether single files, modules, or multi-file stacks—and Claude will conduct production-grade security audits, identify cost optimization opportunities, verify compliance tagging requirements, and flag deviations from cloud best practices. Each finding receives a severity rating (Critical, High, Medium, Low) with specific, actionable remediation steps tailored to your infrastructure.
Features
Detects exposed credentials, overly permissive IAM policies, unencrypted data stores, and public-facing resources without access controls
Identifies over-provisioned resources, unnecessary redundancy, inefficient storage classes, and misconfigured auto-scaling
Validates required metadata for billing, ownership, and regulatory tracking across all resources
Reviews Terraform (HCL), Pulumi (Python/YAML), and CloudFormation (JSON/YAML) in a single pass
Classifies findings as Critical, High, Medium, or Low for risk-driven remediation planning
Verifies adherence to cloud provider recommendations and architectural patterns
Provides line-specific recommendations with context on why each issue matters and how to fix it
Handles single files, entire modules, or multi-file infrastructure stacks
Example Output
Security Finding (Critical)
- Issue: S3 bucket has public read access via
acl = "public-read" - Risk: All objects in this bucket are readable by anyone on the internet
- Remediation: Change
aclto"private"and use CloudFront with OAI for public access
Cost Optimization (High)
- Issue: RDS instance t3.xlarge running with average CPU <5%
- Risk: You're paying for unused compute capacity (~$400/month)
- Recommendation: Downsize to t3.small and monitor performance
Compliance (Medium)
- Issue: EC2 instances missing required
EnvironmentandCostCentertags - Risk: Cannot allocate infrastructure costs to departments; fails compliance audit
- Remediation: Add
tags = { Environment = "prod", CostCenter = "eng-ops" }to all compute resources
What's Included
- infrastructure-as-code-reviewer.md: Core skill instruction file with review framework and severity definitions
- Security checklist: Pre-built security audit criteria covering credentials, IAM, encryption, and network exposure
- Cost optimization template: Inventory of common over-provisioning patterns and right-sizing recommendations
- Tagging & compliance framework: Required tag schema and regulatory mapping guide (GDPR, SOC2, CIS)
- Remediation snippets: Code examples for common fixes across Terraform, Pulumi, and CloudFormation
Who It's For
- Cloud engineers reviewing infrastructure pull requests before production deployment
- DevOps teams conducting security audits and compliance validation
- FinOps specialists identifying cost optimization opportunities in cloud stacks
- Solutions architects validating infrastructure designs against organizational standards
- Security engineers integrating IaC scanning into CI/CD pipelines
Best For
- Pre-production code reviews for Terraform, Pulumi, and CloudFormation
- Security vulnerability scanning and remediation planning
- Cost analysis and right-sizing recommendations
- Compliance tagging audits and regulatory gap identification
- Best practice alignment checks for cloud infrastructure
You might also like
Create comprehensive KPI dashboards that track supply chain performance across cost, quality, delivery, and service metrics. Automate variance analysis to identify root causes of performance deviations and generate executive-level reports that translate operational data into actionable insights for leadership and stakeholders.
by skillslib
You'll design robust SCADA system architectures, configure industrial protocols (Modbus, Profibus, OPC-UA, DNP3), and diagnose connectivity and performance issues across distributed control networks. Get step-by-step configuration guidance, integration workflows, and troubleshooting decision trees tailored to your specific hardware and protocol stack.
by skillslib
You can establish systematic color grading workflows that accelerate project delivery, ensure visual consistency across episodes and projects, and maintain broadcast-quality standards. Claude generates reusable templates, quality control checklists, and grading decision frameworks tailored to your project's color science and deliverable requirements.
by skillslib
You can orchestrate every aspect of your live event with a unified command center that responds to real-time incidents, coordinates teams across departments, and adjusts plans on the fly. The skill generates contingency workflows, communication protocols, and decision frameworks so you stay ahead of problems instead of reacting to them. You'll have structured guidance for everything from timeline adjustments to vendor coordination to emergency escalations.
by skillslib
You'll build complete activation funnels by analyzing user behavior, identifying conversion bottlenecks, and designing targeted onboarding campaigns. Claude creates customer journey maps, funnel stage definitions, engagement messaging frameworks, and A/B testing strategies tailored to your product and audience.
by skillslib
Use Claude to automate your entire collection workflow, from first touch to recovery, with legally sound escalation protocols. You'll recover more money in less time, reduce bad debt write-offs by 25-40%, and build defensible collection records that withstand legal scrutiny. Claude handles customized demand letters, compliance validation, debtor profiling, and escalation strategies tailored to account age, debtor behavior, and jurisdiction.
by skillslib
You can conduct comprehensive active transportation network audits that identify missing links, connectivity gaps, and underserved communities. Claude helps you prioritize infrastructure investments against limited budgets using equity screening, mode-share modeling, and cost-benefit analysis—producing client-ready documentation and stakeholder presentations that justify infrastructure decisions with quantitative evidence rather than assumptions.
by skillslib
This skill helps you troubleshoot Wwise integration issues, diagnose audio performance bottlenecks, and generate comprehensive documentation for interactive audio specifications. You'll get step-by-step fixes for common implementation problems, performance optimization strategies, and best practices for audio systems across different game engines and platforms.
by skillslib