Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
Terrashark diagnoses and fixes the failure modes that plague AI-generated Terraform and OpenTofu code: identity churn, secret exposure, blast-radius mistakes, CI drift, and missing compliance gates. It gives DevOps, platform, and security engineers a structured workflow to review, refactor, and deliver infrastructure code with explicit risk controls.
WHO IT'S FOR
DevOps / IaC engineers
generate, review, or refactor Terraform/OpenTofu code
Platform / Cloud engineering teams
enforce IaC best practices and compliance gates
AI-assisted infrastructure developers
reduce LLM hallucinations when generating Terraform code
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
From the project root, run this terminal code unit to clone TerraShark into `.terrashark`.
# Clone into your project root
git clone https://github.com/LukasNiessen/terrashark.git .terrashark
Add the documented Terraform section to `AGENTS.md`, or create `AGENTS.md` in the repository root. It must direct Codex to follow `.terrashark/SKILL.md` and load references from `.terrashark/references/` as needed.
Path to the Terraform file, replacing `<path-to-main.tf>`
Runtime (`terraform` or `tofu`) and exact version
Providers and target platform
State backend
Execution path such as local CLI or CI
Environment criticality: dev, shared, or prod
Use the terrashark skill to review my Terraform file at `<path-to-main.tf>` for security issues. I am using `<terraform-or-tofu>` version `<exact-version>` with `<providers>`, targeting `<platform>`, with `<state-backend>` through `<local-CLI-or-CI-path>` in a `<dev-shared-or-prod>` environment. State any remaining assumptions, identify the relevant failure modes, and give me a small prioritized remediation plan with tradeoffs, validation steps, and rollback or recovery notes. Do not apply changes.