Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add port-labs/port-skills --skill port-terraformgit clone --depth 1 https://github.com/port-labs/port-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/port-labs/port-skills/port-terraform)<a href="https://agentmods.dev/skills/port-labs/port-skills/port-terraform"><img src="https://agentmods.dev/badge/skills/port-labs/port-skills/port-terraform/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/port-labs/port-skills/port-terraform"><img src="https://agentmods.dev/badge/skills/port-labs/port-skills/port-terraform.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00148 | $0.02679 |
| Opus 5 | $0.00074 | $0.01340 |
| Sonnet 5 | $0.00030 | $0.00536 |
| Haiku 4.5 | $0.00015 | $0.00268 |
Grade A, and why
port-terraform scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 212 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Port Terraform provider
Port's Terraform provider (port-labs/port-labs) lets you define blueprints,
entities, scorecards, self-service actions, webhooks, and integration
mappings as .tf resources, the same way you'd define any other piece of
infrastructure. This skill is reference-only: static knowledge about the
provider's resource schema, drawn from the current v2.x provider and Port's
Terraform docs. It doesn't need a live Port account or Port MCP server to
produce correct HCL, only a real account and API credentials to actually
terraform apply it.
Out of scope: the underlying Port concepts (property types, relation
semantics) are owned by the port-blueprints skill; self-service action
JSON schema and invocation method payload templating aren't covered by a
skill in this repo yet. This skill only covers how those concepts map onto
Terraform arguments. Pulumi is Port's
other IaC provider, briefly noted in Step 1,
but not covered in depth here.
Prerequisites
- Go over the
port-getting-startedskill first if this is your first time working with Port. - The Terraform CLI (or OpenTofu, a drop-in alternative, swap
terraformfortofu). - A Port account and a
client_id/client_secretpair, from ... menu > Credentials in the Port app, or the API docs. - No Port MCP server or CLI is required to write or apply the
.tffiles this skill produces. If one is connected, use it to check the current live state (list_blueprints) before writing HCL that should match it, and searchsearch_port_knowledge_sourcesfor anything this skill doesn't cover.
Step 1 - Set up the provider
Precondition: no port provider block exists in the working directory yet.
Action: add a terraform block pinning port-labs/port-labs, and a
provider "port" block with credentials from environment variables, then
run terraform init:
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 212 lines · 148 tokens per session scan A b8f7225e7a1d
port-terraform is a skill published in the GitHub repository port-labs/port-skills (3 stars, last pushed 10d ago), licensed MIT. It adds 148 tokens to every session and 2,679 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
cloudflare-drop
Publish a static site (a folder of HTML/CSS/JS/images/fonts) to Cloudflare and get back a live, shareable URL in seconds. Use when you have a finished static page or site and need to hand someone a link they can open on any device — reports, mockups, one-off landing pages, AI-generated HTML, "give me a link I can…
deployment-patterns
Guides production rollout strategy — rolling/blue-green/canary deployments, liveness/readiness/startup probes, startup config validation, and rollback planning. Use when choosing a deployment strategy, implementing health check endpoints or Kubernetes probes, planning a rollback path before a release, or reviewing a…
gin-lambda-api-service-patterns
Guides Go API services built with Gin and deployed as a serverless function (AWS Lambda via an API-Gateway adapter) alongside a local HTTP-server dev mode. Use when touching a service's entrypoint, its dual local/serverless run paths, its build-and-deploy pipeline, or reviewing why a change that works locally behaves…
kamal
Sets up, runs, and troubleshoots Kamal deployments (v1 and v2) — zero-downtime Docker deploys to VPS or bare-metal servers. Use when the user mentions Kamal, kamal-proxy, or Traefik, edits config/deploy.yml or .kamal/secrets, or asks to deploy an app to their own server, roll back, add accessories like Postgres or…
release-management-and-rollback-planning
This skill should be used when the user asks to "plan a canary release", "design a rollout strategy", "write a rollback runbook", "should this go behind a feature flag", "how do we release this safely", or is deciding how a change reaches production and how to back out of it if something goes wrong. Use for the…
publisher
Publish HTML frontend projects to the PushWebly publishing platform, list published projects, obtain shareable project URLs, change a published app's public/private visibility, and package published HTML projects into Android APKs. Use when Codex needs to publish a local zip project, publish and build an APK, build an…