Terraform Drift Detection
Detects configuration drift between Terraform state and live infrastructure, identifying unauthorized changes quickly.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add terraform-drift-detection npx -- -y @trustedskills/terraform-drift-detection
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"terraform-drift-detection": {
"command": "npx",
"args": [
"-y",
"@trustedskills/terraform-drift-detection"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill allows AI agents to detect and report on Terraform drift. It identifies differences between your actual infrastructure state and what's defined in your Terraform configuration files. This helps ensure consistency, identify unintended changes, and proactively prevent issues arising from misaligned configurations.
When to use it
- Proactive Infrastructure Audits: Regularly check for drift across environments (dev, staging, production) to maintain a consistent baseline.
- Post-Manual Changes: After someone makes direct changes to infrastructure outside of Terraform, verify that the configuration still accurately reflects reality.
- Incident Response: Investigate unexpected behavior by quickly identifying if any unauthorized or accidental infrastructure modifications have occurred.
- Compliance Checks: Ensure your infrastructure adheres to defined configurations for security and regulatory purposes.
Key capabilities
- Drift detection against Terraform state files.
- Reporting of differences between configuration and actual state.
- Integration with cloud environments (specific platforms not listed).
Example prompts
- "Check for drift in the production environment."
- "Report any changes to resource 'web-server' in the staging environment."
- “What’s changed since last week’s Terraform apply?”
Tips & gotchas
- Requires access to your Terraform state files. Ensure appropriate permissions are configured for the AI agent.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.