terraform-module-reviewer SKILL.md skillA
terraform-module-reviewer from modulestf/modulestf is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add modulestf/modulestf/terraform-module-reviewer@git:20261106.45c1e4bPins git:20261106.45c1e4b in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- modulestf/modulestf
- Path
.agents/skills/terraform-module-reviewer/SKILL.md- Versions recorded
- 10
- Latest version
- git:20261106.45c1e4b, committed Nov 6, 2026
- First version recorded
- Oct 29, 2026
- Size
- 19,434 bytes
- Repository stars
- 369
- License
- Apache-2.0
Review a change to a reusable Terraform module against a module profile (default terraform-aws-modules) and return structured findings. Read-only - never edits code. Use for reviewing a diff or a set of changed files. Not for making the change (use terraform-module-maintainer) and not for general Terraform questions (use terraform-skill). Not for a pull request URL (use terraform-module-pr-review).
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Terraform Module Reviewer Review a change to a reusable Terraform module and report what is wrong with it as structured findings. This skill reads; it never writes. Fixing a finding is the job of `terraform-module-maintainer`. Project-specific conventions come from a profile; the default profile is `terraform-aws-modules`. ## When to Use This Skill **Activate when:** - A task asks for a review of a diff against a module - A task names a set of changed files in a module workspace and asks what is wrong with them - A task asks whether a module change is backwards compatible, complete against the provider schema, or consistent with the profile **Don't activate for:** - Making the change, fixing a finding, or creating a module (use `terraform-module-maintainer`) - General Terraform questions (use the `antonbabenko/terraform-skill` plugin) - Reviewing a root configuration or a live deployment. This skill reviews reusable modules ## Mandatory Rules ### Rule 1: Read-Only, Always - Never create, edit, move, or delete a file in the workspace, including scratch files, notes, and reports. …
Read the whole file at its exact version.
How to install
mdr add modulestf/modulestf/terraform-module-reviewer@sha256:64567a8feac5dc3fThe line at the top of this page pins the label git:20261106.45c1e4b, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_oqciebiym2a7dhbc)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 10 versions of this file, between Oct 29, 2026 and Nov 6, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261106.45c1e4b latest | 2026-11-06 | 45c1e4b | 19,434 B | A | view · diff |
| git:20261106.a7f2368 | 2026-11-06 | a7f2368 | 19,273 B | A | view · diff |
| git:20261103.0cb19ec | 2026-11-03 | 0cb19ec | 18,600 B | A | view · diff |
| git:20261102.8c97301 | 2026-11-02 | 8c97301 | 18,555 B | A | view · diff |
| git:20261101.7efea17 | 2026-11-01 | 7efea17 | 28,180 B | A | view · diff |
| git:20261101.3803922 | 2026-11-01 | 3803922 | 28,016 B | A | view · diff |
| git:20261031.09892ba | 2026-10-31 | 09892ba | 27,995 B | A | view · diff |
| git:20261030.3bd9cf8 | 2026-10-30 | 3bd9cf8 | 27,873 B | A | view · diff |
| git:20261030.fd8dfa4 | 2026-10-30 | fd8dfa4 | 26,901 B | A | view · diff |
| git:20261029.de257cf | 2026-10-29 | de257cf | 26,736 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (19434 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
modulestf/modulestf · 369 stars · license Apache-2.0 · pushed 2026-11-08 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_oqciebiym2a7dhbc GET https://markdownregistry.com/api/v1/resolve?ref=modulestf/modulestf/terraform-module-reviewer GET https://markdownregistry.com/api/v1/blob/64567a8feac5dc3f2ead3fe7848395584870e104dbecfa37a26c02ab10365a9a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.