Terraform Skill (diagnose-first Terraform/OpenTofu guide)

What it does

• Captures execution context first: terraform vs tofu, exact version, providers, state backend, execution path (local/CI/Cloud/Atlantis), environment criticality.
• Classifies the symptom via a failure-mode routing table: identity churn, secret exposure, blast radius, destroy cascade, CI drift, compliance gaps, testing blind spots, state corruption, provider upgrade/lifecycle risk, provisioner misuse.
• Loads only the matching reference file (code-patterns.md, state-management.md, testing-frameworks.md, ci-cd-workflows.md, security-compliance.md, code-intelligence-lsp.md, quick-reference.md) instead of dumping everything.
• Ends every answer with a Response Contract: assumptions & version floor, risk category addressed, chosen remediation & tradeoffs, exact validation commands, rollback notes.
• Applies feature guards by version: moved (1.1+), import (1.5+), native test (1.6+), mock providers (1.7+), S3 native lockfile (1.10+), write_only (1.11+).
• Hard safety rules: never apply to prod without a reviewed plan artifact; never destroy without plan -destroy plus explicit confirmation; never -auto-approve a destroy.

Who it's for

• DevOps and platform engineers running AWS/Azure/GCP infrastructure as code.
• Module authors who need consistent variable/output contracts, naming and release checklists.
• Teams building IaC pipelines in GitHub Actions, GitLab CI or Atlantis.
• Operators about to migrate backends, split state, or recover from a stuck lock.

Example uses

1. "My refactor makes plan recreate 10 resources" → diagnosed as identity churn; migrates count to for_each, generates moved blocks, and verifies a 0-destroy plan.
2. "Move production state to S3" → recommends use_lockfile on 1.10+ or DynamoDB locking below it, with backup, validation and rollback steps.
3. "My tftest for S3 encryption rules keeps failing" → explains that set-type blocks can't be indexed with [0] and computed values need command = apply.
4. "CI plan differs from my local plan" → pins runtime/providers, commits .terraform.lock.hcl, and applies the reviewed plan artifact instead of re-planning.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/antonbabenko/terraform-skill/HEAD/skills/terraform-skill/SKILL.md

What I want: (describe your task here)

Install the skill I found on AI Skill Mart.
Copy the skills/terraform-skill folder from the GitHub repo antonbabenko/terraform-skill into my ~/.claude/skills/antonbabenko-terraform-skill/.
When it's done, tell me in one line what this skill can do.