HashiCorp Agent Skills is a collection of reusable instructions and plugins that help coding agents work with Terraform and Packer. Developers use it to add HashiCorp product workflows to supported coding-agent tools, either individually or as product bundles.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hashicorp/agent-skills --skill new-terraform-providergit clone --depth 1 https://github.com/hashicorp/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hashicorp/agent-skills/new-terraform-provider)<a href="https://agentmods.dev/skills/hashicorp/agent-skills/new-terraform-provider"><img src="https://agentmods.dev/badge/skills/hashicorp/agent-skills/new-terraform-provider/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hashicorp/agent-skills/new-terraform-provider"><img src="https://agentmods.dev/badge/skills/hashicorp/agent-skills/new-terraform-provider.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.00422 |
| Opus 5.5 | $0.00026 | $0.00169 |
| Sonnet 5.5 | $0.00013 | $0.00084 |
| Haiku 4.5 | $0.00007 | $0.00042 |
Grade A, and why
new-terraform-provider scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
To scaffold a new Terraform provider with Plugin Framework:
- If I am already in a Terraform provider workspace, then confirm that I want to create a new workspace. If I do not want to create a new workspace, then skip all remaining steps.
- Create a new workspace root directory. The root directory name should be prefixed with "terraform-provider-". Perform all subsequent steps in this new workspace.
- Initialize a new Go module.
- Run
go get -u github.com/hashicorp/terraform-plugin-framework@latest. - Write a main.go file that follows the example.
- Write an
internal/provider/provider.gofile that follows the example. Rename thedemoprovider, theDEMO_*environment variables, and the authentication attributes to match the target API. - Remove TODO comments from
main.goandprovider.go. - Run
go mod tidy - Run
go build -o /dev/null - Run
go test ./...The scaffold resolves credentials as explicit config with environment variable fallback. To grow that into a full credential provider chain (shared credentials files, profiles, platform identity, configure-time validation), use theprovider-configurationskill (if available). To add the first resource or data source, use theprovider-resourcesskill (if available).
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 41 lines · 66 tokens per session scan A 98e3bf99e4d1
new-terraform-provider is a skill published in the GitHub repository hashicorp/agent-skills (910 stars, last pushed 23d ago), licensed MPL-2.0. It adds 66 tokens to every session and 422 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Railway CLI Development
Guidelines for developing the Railway CLI (railctl) - a Go-based CLI tool for Railway.app infrastructure management.
telnyx-storage-go
Manage cloud storage buckets and objects using the S3-compatible Telnyx Storage API. This skill provides Go SDK examples.
telnyx-networking-go
Configure private networks, WireGuard VPN gateways, internet gateways, and virtual cross connects. This skill provides Go SDK examples.
digitalocean-go
A skill for working with DigitalOcean through Go, a programming language often used for cloud services. The available description does not specify which DigitalOcean tasks it supports.
azure-go
A command-line skill related to using Azure services with Go, a programming language. The input provides a command, defaults, and a YAML configuration option, but not specific Azure or Go tasks.
golang-testing
Go testing best practices including table-driven tests, test helpers, benchmarking, race detection, coverage analysis, and integration testing patterns. Use when writing or improving Go tests.