Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Omar-Obando/qwen-orchestratornpx agentmods add skills/omar-obando/qwen-orchestrator/terraform-iacWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/omar-obando/qwen-orchestrator/terraform-iac)<a href="https://agentmods.dev/skills/omar-obando/qwen-orchestrator/terraform-iac"><img src="https://agentmods.dev/badge/skills/omar-obando/qwen-orchestrator/terraform-iac/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/omar-obando/qwen-orchestrator/terraform-iac"><img src="https://agentmods.dev/badge/skills/omar-obando/qwen-orchestrator/terraform-iac.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.07603 |
| Opus 5 | $0.00028 | $0.03802 |
| Sonnet 5 | $0.00011 | $0.01521 |
| Haiku 4.5 | $0.00006 | $0.00760 |
Grade D, and why
terraform-iac scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
"sudo cp /tmp/config/* /etc/app/", Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
# Linux: curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install.sh | bash Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
# Linux: curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install.sh | bash How it starts
The opening of the file, as written. The whole thing — 1,276 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Terraform Infrastructure as Code Skill — IaC Best Practices
Overview
This skill provides comprehensive guidance for provisioning and managing infrastructure with Terraform, including module design, state management, workspace organization, remote backend configuration, provider management, Sentinel policies, Terratest integration, and production-ready Infrastructure as Code practices. Based on HashiCorp official documentation and HashiCorp Certified: Terraform Associate (003) certification standards.
When to Use
Use this skill when:
- Provisioning cloud infrastructure (AWS, Azure, GCP) with Terraform
- Creating reusable Terraform modules with inputs and outputs
- Managing Terraform state with S3/DynamoDB remote backends
- Configuring Terraform workspaces for multi-environment deployments
- Setting up provider configurations with version pinning
- Implementing Terraform Cloud/Enterprise workflows
- Writing Sentinel policies for compliance enforcement
- Integrating Terratest for infrastructure testing
- Importing existing infrastructure into Terraform state
- Detecting and remediating configuration drift
- Managing Terraform state files (mv, rm, list, pull, push)
- Configuring TFLint for static analysis
- Implementing Terraform formatting and validation pipelines
- Designing variable definitions with validation rules
- Using data sources for external data lookups
- Implementing provisioners (shell, file, remote-exec)
- Publishing modules to Terraform Registry
- Managing Terraform outputs and local values
- Using Terraform Console for interactive exploration
- Setting up CI/CD pipelines with Terraform plan/apply
- Destroying infrastructure safely with dependency awareness
Do NOT use this skill when:
- Deploying containerized applications (use docker-containerization skill)
- Orchestrating Kubernetes workloads (use kubernetes-orchestration skill)
- Writing application code (use backend-developer or frontend-developer skill)
- Configuring CI/CD pipeline orchestration (use devops-pipeline skill)
- Managing database schema migrations (use database-design skill)
- Implementing serverless functions (use aws-serverless skill)
- Setting up monitoring dashboards (use monitoring skill)
- Writing Pulumi or CloudFormation templates (use cloud-specific IaC skill)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 1,276 lines · 56 tokens per session scan D 8835309212ac
terraform-iac is a skill published in the GitHub repository Omar-Obando/qwen-orchestrator (49 stars, last pushed 2mo ago), licensed MIT. It adds 56 tokens to every session and 7,603 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
t-cloud-public
Read T Cloud Public (formerly Open Telekom Cloud) infrastructure inventory and prepare guarded DevOps operations through gateway-managed OTC API signing.
zabbix
Read Zabbix monitoring state, inspect monitored hosts, summarize current or recent problems, and prepare guarded incident-response context without exposing Zabbix credentials.
restart-nginx
SSH into a server, restart Nginx, and verify it's back up.
buckets
Spaces are stateless. All data is wiped on restart / rebuild. For state that must survive (user uploads, generations, dynamic feeds, logs, growing databases): mount an HF Bucket — S3-like object storage living at hf://buckets/ / .
deployment-template
These defaults turn a working demo into something you can leave running. They favor "you'll find out about problems" over "absolute minimum cost". Tune any of them away if needed — the deployment script should be the starting point, not bare createendpoint.
Desenvolvimento de Aplicativos Serverless com AWS Lambda
Esta skill ensina como desenvolver aplicativos escaláveis e seguros utilizando arquiteturas serverless com AWS Lambda.