Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xonovex/platform --skill terraform-guidegit clone --depth 1 https://github.com/xonovex/platformWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xonovex/platform/terraform-guide)<a href="https://agentmods.dev/skills/xonovex/platform/terraform-guide"><img src="https://agentmods.dev/badge/skills/xonovex/platform/terraform-guide/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xonovex/platform/terraform-guide"><img src="https://agentmods.dev/badge/skills/xonovex/platform/terraform-guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00062 | $0.00598 |
| Opus 5.5 | $0.00025 | $0.00239 |
| Sonnet 5.5 | $0.00012 | $0.00120 |
| Haiku 4.5 | $0.00006 | $0.00060 |
Grade A, and why
terraform-guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 37 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Terraform Coding Guidelines
Manage infrastructure through Terraform plans with pinned providers, protected state, and validated changes.
Requirements
- Terraform ≥ 1.12; remote state; pinned providers; fmt/validate.
Essentials
- Module design - One responsibility per module, clear inputs/outputs, typed variables, see references/module-structure.md, references/module-definition.md, references/typed-variables.md
- Composition - Thin root modules, compose child modules, use locals for computed values, see references/root-module.md, references/locals.md
- Environment isolation - Separate envs (dirs + tfvars), isolate state per env, see references/root-module.md, references/remote-state.md
- Advanced patterns - Data sources, dynamic blocks, see references/advanced-patterns.md
Gotchas
- State file (
terraform.tfstate) contains secrets in plaintext: store it remotely with encryption and backend-native locking (S3use_lockfile = true; Azure Blob lease locking) lifecycle { prevent_destroy = true }blocksterraform destroyfor that resource: useful for prod, painful in CI/test envsterraform refreshupdates state from real infra but doesn't show what changed: useterraform plan -refresh-onlyto preview drift- Provider version pinning lives in
required_providers, not the resource block: unpinned providers break on minor upgrades
Progressive disclosure
- Read references/module-structure.md - Load when designing reusable Terraform modules
- Read references/module-definition.md - Load when defining module inputs, outputs, or resources
- Read references/typed-variables.md - Load when adding variable validation or complex types
- Read references/locals.md - Load when computing intermediate values or reducing duplication
- Read references/root-module.md - Load when organizing environment-specific configurations
- Read references/remote-state.md - Load when configuring remote state, encryption, locking, or per-environment state keys
- Read references/advanced-patterns.md - Load when using data sources or dynamic blocks
What ships with it
11 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- eval-queries.json 5.1 KB
- evals.json 2.3 KB
- moon.yml 166 B
- references/advanced-patterns.md 444 B
- references/locals.md 848 B
- references/module-definition.md 844 B
- references/module-structure.md 862 B
- references/remote-state.md 832 B
- references/root-module.md 924 B
- references/typed-variables.md 599 B
- SOURCES.md 817 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +2 lines 56780e62fed3
- 1mo ago First seen · 35 lines · 62 tokens per session scan A 95048899d7e6
terraform-guide is a skill published in the GitHub repository xonovex/platform (6 stars, last pushed 5d ago), licensed MIT. It adds 62 tokens to every session and 598 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other skills, from other repositories
04-security
A security and operations guide for deploying Dify, an open-source platform for building AI applications, in production.
kastell-ops
Kastell CLI patterns, architecture, anti-patterns, and decision trees. Use automatically when working in Kastell codebase or when asked about Kastell server infrastructure, security audit, hardening, lock, provision, or provider management.
synapse
Use when the user needs to inspect or manage Synapse-managed Docker/Compose infrastructure via flux, or SSH/local host files, processes, logs, ZFS, and allowlisted commands via scout. Prefer MCP tools first, CLI second, REST last; use write or confirmation-gated actions only when explicitly requested or necessary.
infra-ops
How to operate live infrastructure safely — servers, SSH, deployments, databases, containers, incidents and outages. Use when the operator asks to deploy, restart, migrate, debug a production problem, run something on a remote host, or touch a database.
x-nets
Enhanced netstat module with cached data and structured output. View network connections, routing tables, and interface statistics in interactive or TSV/CSV formats. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
tsv
TSV data processing — view, filter, convert tab-separated data. Zero barrier — use with x-cmd, awk, or Python. Use for "tsv", "tab-separated", "data", "conversion".