Is the Terrashark skill free?

Yes. The skill itself is free from LukasNiessen/terrashark. SkillProof publishes the install command and an independent test verdict at no cost.

What is the Terrashark SkillProof Score?

8.4/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 4/5.

How do I install Terrashark?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use Terrashark with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

Terrashark

Terraform/OpenTofu failure-mode workflow that catches identity churn and unsafe applies

by LukasNiessen · LukasNiessen/terrashark

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.4/10
Tested: Jul 31, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · 108c4e8

Fetched SKILL.md (root) via raw GitHub; frontmatter parses with name+description. Spot-checked 3 body-referenced files (references/identity-churn.md, references/secret-exposure.md, references/conditional/trusted-modules.md) — all HTTP 200; no security smells (no curl|sh, no base64, no exfiltration). For OUTPUT I ran a real refactor task (insert an S3 bucket into a `count`-over-list config) and wrote two artifacts: the baseline just edits the list — which with positional `count` identity forces a destroy/recreate of the shifted bucket (S3 data loss) — while the skill-guided output migrates to `for_each` with stable keys, adds one `moved` block per old index, and requires `terraform show plan.bin | grep -i moved` plus lower-env-first apply. Concrete, safety-relevant difference. README oversells slightly ("#1 skill", "eliminates hallucinations") but the workflow and HCL examples are accurate.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 7/10
Docs & honesty 4/5

What Terrashark does

A Terraform/OpenTofu guidance skill that runs a fixed failure-mode workflow (identity churn, secret exposure, blast radius, CI drift, compliance gaps) and progressively loads reference files matched to the task. It triggers when you generate, review, refactor, or migrate IaC, or build delivery/testing pipelines, and it enforces safeguards like `moved` blocks, plan-before-apply verification, and rollback notes.

How to install Terrashark

git clone --depth 1 https://github.com/LukasNiessen/terrashark.git /tmp/terrashark-src
mkdir -p ~/.claude/skills/terrashark
cp -R /tmp/terrashark-src/. ~/.claude/skills/terrashark/
# SKILL.md is at repo root; references/ and references/conditional/ ship alongside it and must be copied too (the workflow loads them on demand).
# No external deps, API keys, or scripts — pure guidance skill.
# Plugin-marketplace alternative: /plugin marketplace add LukasNiessen/terrashark  then  /plugin install terrashark

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Terrashark

/terrashark Terraform/OpenTofu failure-mode workflow that catches identity churn and unsafe applies

It also activates on plain-language prompts like these:

Review this Terraform plan for blast-radius risk
Check this module for exposed secrets
Migrate this IaC config without drift

Frequently asked questions

Is the Terrashark skill free?: Yes. The skill itself is free from LukasNiessen/terrashark. SkillProof publishes the install command and an independent test verdict at no cost.
Does Terrashark work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 31, 2026. Verdict: Tested · Works. Fetched SKILL.md (root) via raw GitHub; frontmatter parses with name+description. Spot-checked 3 body-referenced files (references/identity-churn.md, references/secret-exposure.md, references/conditional/trusted-modules.md) — all HTTP 200; no security smells (no curl|sh, no base64, no exfiltration). For OUTPUT I ran a real refactor task (insert an S3 bucket into a `count`-over-list config) and wrote two artifacts: the baseline just edits the list — which with positional `count` identity forces a destroy/recreate of the shifted bucket (S3 data loss) — while the skill-guided output migrates to `for_each` with stable keys, adds one `moved` block per old index, and requires `terraform show plan.bin | grep -i moved` plus lower-env-first apply. Concrete, safety-relevant difference. README oversells slightly ("#1 skill", "eliminates hallucinations") but the workflow and HCL examples are accurate.
What is the Terrashark SkillProof Score?: 8.4/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 4/5.
How do I install Terrashark?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Terrashark with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.