
Keep your agent's Terraform and OpenTofu correct: a failure-mode workflow against state churn, leaked secrets, blast radius and CI drift.
by LukasNiessen· Cloud & DevOpsUnclaimed · Yours? Claim it
4 images
About
TerraShark is an open-source agent skill by Lukas Niessen for writing and reviewing Terraform and OpenTofu. It gives your agent a step-by-step workflow built around the ways infrastructure code usually goes wrong, with good, bad and neutral examples, and it's based mainly on HashiCorp's recommended practices. What you can do with it - Generate modules and stacks that avoid identity churn: unstable resource addresses, count-to-for_each moves and missing moved blocks - Review code for secret exposure and security and governance gaps - Plan changes with the blast radius in mind, such as splitting state per environment - Set up CI and delivery: plan on pull requests, gated applies and drift detection - Add compliance gates and a testing matrix for your infrastructure code - Follow migration playbooks and module architecture guidance How it connects - In Claude Code, run /plugin marketplace add LukasNiessen/terrashark, then /plugin install terrashark. You can also clone it into your skills folder for Claude Code, Antigravity or Gemini CLI, or reference it from AGENTS.md in Codex. - It activates for Terraform and OpenTofu tasks, or call it directly with /terrashark. Good to know - Its answers end with the assumptions, trade-offs and checks behind them. - The skill keeps its guidance short and loads reference files only when a task needs them. - It's open source under the MIT licence.
Skills people install alongside TerraShark.
Once it’s added
“Create a multi-region S3 module with replication.”
“Review my main.tf for security issues.”
“Migrate this module from count to for_each without recreating resources.”
“Split our stack into separate state files per environment.”
“Set up a GitHub Actions pipeline with plan on PR and gated apply on merge.”
Before you add it
Reads only
Your Terraform and OpenTofu code and pipelines
Makes changes · your agent can ask first
Writes and refactors Terraform and OpenTofu code, moved blocks and CI pipelines
From people who use it
Step by step
Nothing new reaches your agent until a person has looked at it.
Scanned on every change, and again when our rules improve.
Runs on your machine.
Runs on your machine.
Runs on your machine.
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.copilot/skills/terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.cursor/skills/terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.claude/skills/terrashark
/plugin marketplace add LukasNiessen/terrashark /plugin install terrashark@terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.agents/skills/terrashark
Runs on your machine.
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.gemini/skills/terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark .agents/skills/terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.openclaw/skills/terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.config/opencode/skills/terrashark
Runs on your machine.
npx -y degit LukasNiessen/terrashark ~/.hermes/skills/terrashark
Scanned and passed · checked 48 min ago
No reviews yet. Used TerraShark? Say how it went.
Write a reviewSkills people install alongside TerraShark.
Microsoft's Azure know-how for your coding agent: prepare and deploy apps, run AKS, Azure AI, storage and identity.
Makes your agent diagnose Kubernetes failure modes before writing YAML, so manifests, Helm charts and RBAC come out secure and current.
Gives a local app a public HTTPS URL through self-hosted or public relays, then checks it works. No accounts, port forwarding or DNS setup.
Vast.ai's own skills for its CLI and Python SDK: your agent finds GPU offers, rents and manages instances, volumes and serverless endpoints.
Nobody has shared how they use TerraShark yet.
Security scan
Passed
Safe to install in every agent it supports. Runs in your agent, as instructions.