Harden Iac — Security skill for Claude Code
Pin Terraform modules, check state security, and flag dangerous provisioners.
How to install Harden Iac
Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-iac/SKILL.md
mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-iac && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/harden-iac.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-iac/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Harden Iac does
description: Pin Terraform modules, check state security, and flag dangerous provisioners allowed-tools: Read, Write, Edit, Glob, Grep, Bash(terraform:*, tofu:*, checkov:*, git:*, curl:*, which:*, pip:*, brew:*) argument-hint: [directory]
Audit and harden Infrastructure-as-Code configurations for supply chain security. **This command takes action by default** - it pins module versions, generates lockfiles, and flags dangerous provisioners. Changes are explained as they are made.
Read `
Alternatives in Security
- Harden — Run the harden skill to perform a systematic project hardening audit 1k ★
- Agentseal — Security toolkit for AI agents 344 ★
- Claude Skill Antivirus — Security scanner for Claude Code Skills — 9 engines detect malicious patterns, data exfiltration, dangerous op 64 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Iac Review
Full Terraform/Ansible IaC review — plan sanity, security, state hygiene, and Checkov findings.
Iac Secopilot
Ask natural-language questions about a Terraform plan and get cited, evaluated answers grounded in the CIS AWS
Checkov
Bootstrap Checkov on a developer laptop, run static or plan-level Terraform security scanning for AWS/Azure/GC
Harden Deps
Deployment hardening step 3 — run ecosystem-native vulnerability audit (full tree AND production-only, so ship
Audit Multi Chain
Diff the on-chain configuration of one contract deployed across multiple chains — owner, oracle, fees, timeloc
Audit Wiring
Parallel read-only wiring audit — trace every field, flag, and state to its downstream consumer and classify i
Related Agents
Opentofu Ops Expert
Senior DevOps / OpenTofu expert. Use proactively for IaC authoring/review: validate syntax/modules/plans, enfo
Terraform Expert
Use this agent for all Terraform-related tasks: writing or reviewing Terraform code, debugging plan/apply erro
Ehs Infra Cloud
Infrastructure and cloud security specialist for the Ethical Hacker Squad. Reviews Terraform and other IaC, Do