Infrastructure As Code Reviewer
Review Terraform, Pulumi & CloudFormation for security, cost, and compliance issues
What You Can Do
You can submit Terraform, Pulumi, or CloudFormation code—whether single files, modules, or multi-file stacks—and Claude will conduct production-grade security audits, identify cost optimization opportunities, verify compliance tagging requirements, and flag deviations from cloud best practices. Each finding receives a severity rating (Critical, High, Medium, Low) with specific, actionable remediation steps tailored to your infrastructure.
Features
Detects exposed credentials, overly permissive IAM policies, unencrypted data stores, and public-facing resources without access controls
Identifies over-provisioned resources, unnecessary redundancy, inefficient storage classes, and misconfigured auto-scaling
Validates required metadata for billing, ownership, and regulatory tracking across all resources
Reviews Terraform (HCL), Pulumi (Python/YAML), and CloudFormation (JSON/YAML) in a single pass
Classifies findings as Critical, High, Medium, or Low for risk-driven remediation planning
Verifies adherence to cloud provider recommendations and architectural patterns
Provides line-specific recommendations with context on why each issue matters and how to fix it
Handles single files, entire modules, or multi-file infrastructure stacks
Example Output
Security Finding (Critical)
- Issue: S3 bucket has public read access via
acl = "public-read" - Risk: All objects in this bucket are readable by anyone on the internet
- Remediation: Change
aclto"private"and use CloudFront with OAI for public access
Cost Optimization (High)
- Issue: RDS instance t3.xlarge running with average CPU <5%
- Risk: You're paying for unused compute capacity (~$400/month)
- Recommendation: Downsize to t3.small and monitor performance
Compliance (Medium)
- Issue: EC2 instances missing required
EnvironmentandCostCentertags - Risk: Cannot allocate infrastructure costs to departments; fails compliance audit
- Remediation: Add
tags = { Environment = "prod", CostCenter = "eng-ops" }to all compute resources
What's Included
- infrastructure-as-code-reviewer.md: Core skill instruction file with review framework and severity definitions
- Security checklist: Pre-built security audit criteria covering credentials, IAM, encryption, and network exposure
- Cost optimization template: Inventory of common over-provisioning patterns and right-sizing recommendations
- Tagging & compliance framework: Required tag schema and regulatory mapping guide (GDPR, SOC2, CIS)
- Remediation snippets: Code examples for common fixes across Terraform, Pulumi, and CloudFormation
Who It's For
- Cloud engineers reviewing infrastructure pull requests before production deployment
- DevOps teams conducting security audits and compliance validation
- FinOps specialists identifying cost optimization opportunities in cloud stacks
- Solutions architects validating infrastructure designs against organizational standards
- Security engineers integrating IaC scanning into CI/CD pipelines
Best For
- Pre-production code reviews for Terraform, Pulumi, and CloudFormation
- Security vulnerability scanning and remediation planning
- Cost analysis and right-sizing recommendations
- Compliance tagging audits and regulatory gap identification
- Best practice alignment checks for cloud infrastructure
You might also like
You can evaluate unfamiliar locations objectively against your specific production needs—whether that's crane access, parking capacity, noise restrictions, or permit requirements. The skill generates comprehensive scout reports that compare multiple sites using weighted evaluation matrices, flag deal-breakers early, and document infrastructure limitations so your production team makes informed decisions before committing resources to visits.
by skillslib
You'll design robust SCADA system architectures, configure industrial protocols (Modbus, Profibus, OPC-UA, DNP3), and diagnose connectivity and performance issues across distributed control networks. Get step-by-step configuration guidance, integration workflows, and troubleshooting decision trees tailored to your specific hardware and protocol stack.
by skillslib
You can establish systematic color grading workflows that accelerate project delivery, ensure visual consistency across episodes and projects, and maintain broadcast-quality standards. Claude generates reusable templates, quality control checklists, and grading decision frameworks tailored to your project's color science and deliverable requirements.
by skillslib
Use Claude to automate your entire collection workflow, from first touch to recovery, with legally sound escalation protocols. You'll recover more money in less time, reduce bad debt write-offs by 25-40%, and build defensible collection records that withstand legal scrutiny. Claude handles customized demand letters, compliance validation, debtor profiling, and escalation strategies tailored to account age, debtor behavior, and jurisdiction.
by skillslib
You can conduct comprehensive active transportation network audits that identify missing links, connectivity gaps, and underserved communities. Claude helps you prioritize infrastructure investments against limited budgets using equity screening, mode-share modeling, and cost-benefit analysis—producing client-ready documentation and stakeholder presentations that justify infrastructure decisions with quantitative evidence rather than assumptions.
by skillslib
Turn project descriptions, timelines, and structured data into professional draw.io diagrams instantly. You can generate flowcharts, org charts, Gantt charts, swimlane diagrams, and process flows by describing what you need. Claude creates draw.io XML that you can open directly in the editor or modify further.
by skillslib
Generate customized legal documents and client communications automatically from your MyCase case data. This skill extracts case details, client information, and matter status to populate document templates, send email updates, and create batch processing workflows. Reduce manual data entry and standardize your document generation process while maintaining client communication consistency.
by skillslib
This skill helps you troubleshoot Wwise integration issues, diagnose audio performance bottlenecks, and generate comprehensive documentation for interactive audio specifications. You'll get step-by-step fixes for common implementation problems, performance optimization strategies, and best practices for audio systems across different game engines and platforms.
by skillslib