Terraform Cloud

Terraform Cloud — manage workspaces, runs, plans, state, and variables via REST API

Security Scan

The skill mostly matches its Terraform Cloud purpose, but the runtime script reads an undocumented .env fallback and contains API path/placeholder bugs — behavior that should be verified before use.

Purpose & Capability

Name/description, required env vars (TFC_TOKEN, TFC_ORG), and the included Python CLI all align with a Terraform Cloud REST API client.

Instruction Scope

SKILL.md instructs running the bundled CLI and documents TFC_TOKEN/TFC_ORG, but the script will also attempt to read a .env file from a workspace path (WORKSPACE env or ~/.openclaw/workspace/.env) if the env var is missing — this file access is not documented. The script also accepts full URLs in its request helper and contains several placeholder/formatting bugs (e.g., paths with '{org}' are not substituted) that affect how requests are formed.

Install Mechanism

No install spec — the skill is instruction-only with a single Python stdlib script. This is low-risk from an install/execution origin perspective.

Credentials

Only TFC_TOKEN and TFC_ORG are required and appropriate for Terraform Cloud, but the script will read the WORKSPACE environment variable and a .env file as a fallback. That undocumented filesystem access increases the attack surface (it will parse any .env it finds to extract the declared variables).

Persistence & Privilege

The skill is not always-enabled and does not request system-wide changes or privileges beyond reading an optional .env file; it does not modify other skills or agent configuration.

What to consider before installing

This skill appears to be a Terraform Cloud CLI and asks only for TFC_TOKEN and TFC_ORG (expected). However: 1) review the bundled scripts/terraform-cloud.py before installing — it will read a .env fallback at $WORKSPACE/.env or ~/.openclaw/workspace/.env (undocumented in SKILL.md). 2) Verify the script's request paths (it leaves '{org}' placeholders and may not substitute them), so test on non-production data first. 3) Use a least-privilege TFC token (limited scope) and avoid placing high-privilege tokens in shared .env files. 4) If you don't trust the publisher, don't install — or run the CLI manually in an isolated environment/VM and inspect behavior during basic operations. If you want, I can point out the exact lines that read the .env and the places where '{org}' is not substituted.

Terraform Cloud — manage workspaces, runs, plans, state, and variables via REST API

Requirements

Variable	Required	Description
TFC_TOKEN	✅	API token from app.terraform.io
TFC_ORG	✅	Organization name

Quick Start

# List organizations
python3 {{baseDir}}/scripts/terraform-cloud.py orgs

# List workspaces
python3 {{baseDir}}/scripts/terraform-cloud.py workspaces --search[name] <value>

# Get workspace
python3 {{baseDir}}/scripts/terraform-cloud.py workspace-get id <value>

# Create workspace
python3 {{baseDir}}/scripts/terraform-cloud.py workspace-create --name <value> --auto-apply <value> --terraform-version <value>

# Delete workspace
python3 {{baseDir}}/scripts/terraform-cloud.py workspace-delete id <value>

# Lock workspace
python3 {{baseDir}}/scripts/terraform-cloud.py workspace-lock id <value> --reason <value>

# Unlock workspace
python3 {{baseDir}}/scripts/terraform-cloud.py workspace-unlock id <value>

# List runs
python3 {{baseDir}}/scripts/terraform-cloud.py runs id <value>

All Commands

Command	Description
orgs	List organizations
workspaces	List workspaces
workspace-get	Get workspace
workspace-create	Create workspace
workspace-delete	Delete workspace
workspace-lock	Lock workspace
workspace-unlock	Unlock workspace
runs	List runs
run-get	Get run
run-create	Create run
run-apply	Apply run
run-discard	Discard run
run-cancel	Cancel run
plan-get	Get plan
state-version	Get current state
variables	List variables
variable-create	Create variable
variable-delete	Delete variable
teams	List teams

Output Format

All commands output JSON by default. Add --human for readable formatted output.

python3 {{baseDir}}/scripts/terraform-cloud.py <command> --human

Script Reference

Script	Description
{{baseDir}}/scripts/terraform-cloud.py	Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation