T

Terraform Boundary

Claude Code, Codex, Cursor, and Windsurf skill that deploys AI agents on AWS, Azure, GCP, or Snowflake with Terraform while keeping a human in the loop: a hook blocks agent-run apply and destroy, only a human at a terminal can apply after typing the plan's fingerprint, and each change gets an evidence record for regulated-environment reviews

somesh-ghaturle/agentic-boundary-terraform · v1.6.3 · Tools & Integrations

Somesh GhaturleOwner verifiedsafe

Trust Score

89

Security

95

Surfaces

1

What is Terraform Boundary?

Terraform Boundary is a published tools & integrations plugin for AI coding agents in the codex ecosystem, developed by Somesh Ghaturle and distributed through the HOL AI plugin registry. Claude Code, Codex, Cursor, and Windsurf skill that deploys AI agents on AWS, Azure, GCP, or Snowflake with Terraform while keeping a human in the loop: a hook blocks agent-run apply and destroy, only a human at a terminal can apply after typing the plan's fingerprint, and each change gets an evidence record for regulated-environment reviews

Canonical slug
somesh-ghaturle/agentic-boundary-terraform
Version
v1.6.3 · updated Oct 9, 2026

Trust & Reputation

HOL Trust Score
89

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
55pts
MCP Posture
100pts
Plugin Security
95pts
Provenance
70pts
Publisher Quality
75pts

Registry Snapshot

Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Safety label
safe
Digest verified
Yes
1 bundled skill — copy or download SKILL.mdOpen skills

Trust & reputation

Trust & Reputation

HOL Trust Score
89

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
55pts
MCP Posture
100pts
Plugin Security
95pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
.
Source repo
https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills
Source commit
09bafcc7ffc1…
Publisher verified
No
Owner verified
@somesh-ghaturle

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

Verified badge detected

This listing scores +2% trust because the HOL verified badge is present in the source repository README.

Security Posture

safe
Safety label
95
Security score
0
High findings
Provider
registry-broker-fallback
Grade
A · safe
Version
Unknown
cisco-skill-scanner: unknown

Findings

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Terraform Boundary — Frequently asked questions

What is Terraform Boundary?
Terraform Boundary is an AI plugin in the HOL registry. Claude Code, Codex, Cursor, and Windsurf skill that deploys AI agents on AWS, Azure, GCP, or Snowflake with Terraform while keeping a human in the loop: a hook blocks agent-run apply and destroy, only a human at a terminal can apply after typing the plan's…
How do I install Terraform Boundary?
Install Terraform Boundary in your harness: Codex — codex plugin marketplace add somesh-ghaturle/agentic-boundary-terraform-skills; Claude Code — /plugin marketplace add somesh-ghaturle/agentic-boundary-terraform-skills. Full step-by-step guidance is on the HOL plugin page.
How do I install Terraform Boundary in Codex?
To install Terraform Boundary in Codex, start with codex plugin marketplace add somesh-ghaturle/agentic-boundary-terraform-skills. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install Terraform Boundary in Claude Code?
To install Terraform Boundary in Claude Code, start with /plugin marketplace add somesh-ghaturle/agentic-boundary-terraform-skills. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How do I install Terraform Boundary in Cursor?
To install Terraform Boundary in Cursor, start with npx skills add somesh-ghaturle/agentic-boundary-terraform-skills. The complete step-by-step install guide for Cursor is on the HOL plugin page.
Is Terraform Boundary free?
Pricing for Terraform Boundary is published on its HOL plugin page when the maker schedules a launch.
Who publishes Terraform Boundary?
Terraform Boundary is published by Somesh Ghaturle and listed on HOL.
Is Terraform Boundary available now?
Terraform Boundary availability is listed on its HOL plugin page.

Install Guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs
  1. 1

    Add the marketplace

    Run this inside a Claude Code session.

    claude code
  2. 2

    Install the plugin

    Use the plugin name and the marketplace name shown by the previous command.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell

Plugin Manifest

{
  "name": "agentic-boundary-terraform",
  "version": "1.6.3",
  "description": "Human-in-the-loop deployment of Agentic-AI-Systems agents on AWS, Azure, GCP or Snowflake, with security review and regulated-environment evidence. Works in Claude Code, Codex, Cursor and Windsurf. Only a human applies.",
  "author": {
    "name": "Somesh Ghaturle",
    "url": "https://github.com/somesh-ghaturle"
  },
  "homepage": "https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills",
  "repository": "https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills",
  "license": "Apache-2.0",
  "keywords": [
    "terraform",
    "human-in-the-loop",
    "security",
    "aws",
    "azure",
    "gcp",
    "snowflake"
  ],
  "skills": "./",
  "hooks": "./hooks/hooks.json",
  "interface": {
    "displayName": "Terraform Boundary",
    "developerName": "Somesh Ghaturle",
    "shortDescription": "AI coding agents can plan your Terraform. Only a human can apply it.",
    "longDescription": "Deploys Agentic-AI-Systems agents on AWS, Azure, GCP or Snowflake behind a human-approval write boundary. A hook blocks terraform apply, destroy and -auto-approve; boundary.sh apply needs a real terminal and the plan's fingerprint typed by a human; and the agent gets read-only cloud credentials. Every change is gated on the pinned release's write-boundary tests, provider pins, OPA policies and terraform validate.",
    "category": "Security",
    "capabilities": [
      "Read",
      "Write"
    ],
    "websiteURL": "https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills#readme",
    "privacyPolicyURL": "https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills/blob/main/PRIVACY.md",
    "termsOfServiceURL": "https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills/blob/main/LICENSE",
    "defaultPrompt": [
      "Set up the approval-gated agent on GCP in ./infra",
      "Check ./infra against the write boundary"
    ],
    "brandColor": "#4F46E5",
    "composerIcon": "./assets/icon.svg",
    "logo": "./assets/icon.svg",
    "screenshots": [
      "./assets/screenshots/cover.png",
      "./assets/screenshots/gcp-fetch-and-check.png",
      "./assets/screenshots/guard-blocks-apply.png",
      "./assets/screenshots/widened-boundary-refused.png"
    ]
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL
https://github.com/somesh-ghaturle/agentic-boundary-terraform-skills
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • terraform-boundary

    skills/terraform-boundary/SKILL.md

    Human-in-the-loop deployment of an AI agent's cloud infrastructure, with security review and regulated-environment evidence. Adapts a pinned Agentic-AI-Systems Terraform tree on AWS, Azure, GCP or Snowflake so that no state-changing tool runs without a human approving that exact action, gates every edit on that repository's own write-boundary checks, and leaves apply to a human. Use only when the user wants to deploy, adapt or check an approval-gated agent built from Agentic-AI-Systems, or needs its security review or compliance evidence. Do not use for general Terraform, other infrastructure, application code or anything outside that scope.

    Raw SKILL.md

File Inventory

.claude-plugin/plugin.json

file

685 bytes

6336741e7c366b19…

.codex-plugin/plugin.json

plugin-manifest

2,115 bytes

4b72e22a41719092…

AGENTS.md

file

1,493 bytes

ce3f024f217e9ad3…

assets/icon.svg

asset

368 bytes

a27157faf35e2952…

assets/screenshots/cover.png

asset

529,720 bytes

0be76432f3406119…

assets/screenshots/gcp-fetch-and-check.png

asset

378,764 bytes

9f1b29027d3f22c7…

assets/screenshots/guard-blocks-apply.png

asset

315,304 bytes

73ff25373ec1a627…

assets/screenshots/widened-boundary-refused.png

asset

351,316 bytes

b4bff81bade1aaf9…

CLAUDE.md

file

24 bytes

573138e19d3359c4…

hooks/hooks.json

file

358 bytes

99fcb2feecf5faa3…

README.md

file

9,842 bytes

cb8190b7ea49624f…

SECURITY.md

file

1,331 bytes

b08b31796f64f6a8…

skills/terraform-boundary/hooks/guard.py

skill

12,875 bytes

7cbab3c2f2901d7e…

skills/terraform-boundary/scripts/boundary.sh

skill

12,112 bytes

07a1b97520ca68fe…

skills/terraform-boundary/scripts/canonical.py

skill

1,188 bytes

87833904ce6533cc…

skills/terraform-boundary/scripts/state.py

skill

2,913 bytes

65c6d6e18e28d21d…

skills/terraform-boundary/SKILL.md

skill

14,654 bytes

25e1db1494681da7…