tf-plan-review

Before installing or running this skill: - Expect to have jq and terraform (or tofu) on PATH — the registry metadata incorrectly lists no required binaries. Confirm these are present. - Review the included scripts yourself (scripts/tf-plan-review.sh) before trusting it in production. The script is mostly conservative, but it does run `terraform init` if the directory is not initialized, which creates/changes .terraform and can download providers/modules from the network. - If you are concerned about downloading untrusted providers, run the tool in a sandbox or on a copy of the repo that has already been initialized, or set TF_BINARY to a vetted wrapper. - The script writes the plan JSON to a secure temporary file and removes it on exit, but temporary files can persist until deleted; avoid running it on hosts where tmp is not trusted or where disk-forensics is a concern. - Do not grant this skill more credentials than necessary. Because it relies on Terraform, it will use whatever provider credentials Terraform finds; run it with least privilege or in a read-only/staging account if possible. - The discrepancies (metadata omitting dependencies, SKILL.md claiming purely in-memory while script uses a temp file) justify manual review; if you cannot review the script, treat the skill as potentially risky and test it in isolated environments first.