terraform-policy
starsforks
How to install terraform-policy?
hashicorp/agent-skills/terraform-policy
$npx -y skills add hashicorp/agent-skills --skill terraform-policyWrite, test, or convert Terraform Policy files (.policy.hcl, .policytest.hcl, Sentinel→tfpolicy). Triggers: policy.hcl, policytest, convert sentinel, tfpolicy, write a policy.
SKILL.md
| 1 | # terraform-policy |
| 2 | |
| 3 | **UTILITY SKILL** — INVOKES: [tfpolicy-author](references/tfpolicy-author.md) | [tfpolicy-test](references/tfpolicy-test.md) |
| 4 | |
| 5 | ## USE FOR: |
| 6 | |
| 7 | - Writing a new `.policy.hcl` policy from a description or requirement |
| 8 | - Converting a `.sentinel` policy to Terraform Policy |
| 9 | - Writing or debugging a `.policytest.hcl` test file |
| 10 | - Migrating a Sentinel policy library to Terraform Policy |
| 11 | |
| 12 | ## DO NOT USE FOR: |
| 13 | |
| 14 | - Writing `.tftest.hcl` files for Terraform modules — use `terraform-test` |
| 15 | - General Terraform HCL authoring — use `terraform-style-guide` |
| 16 | |
| 17 | ## Routing |
| 18 | |
| 19 | | Task | Sub-skill | |
| 20 | |------|-----------| |
| 21 | | Write or convert a `.policy.hcl` policy | [tfpolicy-author](references/tfpolicy-author.md) | |
| 22 | | Write or debug a `.policytest.hcl` test | [tfpolicy-test](references/tfpolicy-test.md) | |
| 23 | |
| 24 | ## Examples |
| 25 | |
| 26 | - "Block EC2 instances without encryption" → [tfpolicy-author](references/tfpolicy-author.md) |
| 27 | - "Convert this Sentinel policy to tfpolicy" → [tfpolicy-author](references/tfpolicy-author.md) |
| 28 | - "Write a policytest for my EBS policy" → [tfpolicy-test](references/tfpolicy-test.md) |
| 29 | |
| 30 | ## Troubleshooting |
| 31 | |
| 32 | - **Wrong skill triggered?** Load the sub-skill directly from the routing table above. |
| 33 | |
| 34 | ```bash |
| 35 | npx skills add hashicorp/agent-skills/terraform/terraform-policy/skills/tfpolicy-author |
| 36 | npx skills add hashicorp/agent-skills/terraform/terraform-policy/skills/tfpolicy-test |
| 37 | ``` |
People who liked this also viewed
6 picksType
- microsoft-foundryDeploy, evaluate, fine-tune, and manage Foundry agents end-to-end with azd: hosted agent scaffold/run/deploy, prompt agent create, batch eval, continuous eval, prompt optimizer, Agent Optimizer scaffoSkillsJul 2026
- azure-deployExecute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application SkillsJul 2026
- azure-preparePrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wSkillsJul 2026
- azure-validate--- name: azure-validate description: "Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity pSkillsJul 2026
- azure-aigatewayConfigure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbSkillsJul 2026
- azure-hosted-copilot-sdkOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026
