Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/zircote/terraform-lsp/setupgit clone --depth 1 https://github.com/zircote/terraform-lspWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.02054 |
| Opus 5 | $0.00000 | $0.01027 |
| Sonnet 5 | $0.00000 | $0.00411 |
| Haiku 4.5 | $0.00000 | $0.00205 |
Grade D, and why
setup scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg How it starts
The opening of the file, as written. The whole thing — 298 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Terraform LSP & Toolchain Setup
Set up terraform-ls LSP integration and install all Terraform tools required by the hooks in this project.
Current Tool Versions (January 2026)
| Tool | Version | Notes |
|---|---|---|
| terraform | 1.14.3 | Includes new Actions feature |
| terraform-ls | 0.38.3 | LSP server |
| tflint | 0.60.0 | New .tflint.json config support |
| tfsec | 1.28.14 | Deprecated - migrate to Trivy |
| trivy | latest | Recommended replacement for tfsec |
| checkov | 3.2.495 | Python 3.9-3.13 supported |
| terraform-docs | 0.21.0 | |
| infracost | 0.10.43 | |
| terragrunt | 0.94.x | Approaching 1.0 release |
Instructions
Execute the following setup steps in order:
1. Verify Terraform Installation
Check that Terraform is installed:
terraform --version
If not installed, guide the user to https://developer.hashicorp.com/terraform/install or use:
# macOS (Homebrew)
brew tap hashicorp/tap
brew install hashicorp/tap/terraform
# Linux (apt)
wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
sudo apt update && sudo apt install terraform
2. Install terraform-ls (Language Server)
Check if terraform-ls is available:
which terraform-ls || echo "terraform-ls not found"
Install terraform-ls:
# macOS (Homebrew)
brew install hashicorp/tap/terraform-ls
# Linux - download from releases
# https://github.com/hashicorp/terraform-ls/releases
# Or via go install
go install github.com/hashicorp/terraform-ls@latest
3. Install Required Linting Tools
Install TFLint for configuration linting:
# macOS (Homebrew)
brew install tflint
# Linux
curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash
# Initialize TFLint plugins
tflint --init
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 298 lines · 0 tokens per session scan D ea1bd882a0ac
setup is a command published in the GitHub repository zircote/terraform-lsp (2 stars, last pushed 23d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 2,054 tokens. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
drawio-architect
Generate an OCI architecture draw.io diagram from Terraform configs or description.
deploy
Шаг 6 — GitHub-репозиторий + Vercel-деплой + свой домен. Боевой URL.
msd-build
Build the app using EAS — local build (no cloud queue) or EAS cloud. Tracks output binary path for direct submission.
open-internet
Set up your own private server for unrestricted internet access — buy it, configure it, connect to it, and keep it working.
qovery-preview
Create a preview environment for a PR or branch using Qovery.
qovery-terraform
Generate Terraform manifests from an existing Qovery setup.