Anton Babenko's terraform-skill takes a diagnose-first approach: it routes your question through a failure-mode table (identity churn, secret exposure, blast radius, CI drift, state corruption) before generating code. Every response includes version assumptions, risk category, tradeoffs, validation commands, and rollback notes. The workflow loads reference depth on demand rather than dumping everything upfront. It enforces a response contract that blocks direct production applies without reviewed plan artifacts. If you're tired of Terraform advice that ignores blast radius or skips the "how do I undo this" part, this codifies the discipline that separates safe IaC from resume-generating events.
npx skills add https://github.com/antonbabenko/terraform-skill --skill terraform-skill