Execute use when detecting infrastructure drift from desired state. Trigger with phrases like "check for drift", "infrastructure drift detection", "compare actual vs desired state", or "detect configuration changes". Identifies discrepancies between current infrastructure and IaC definitions using terraform plan, cloudformation drift detection, or manual comparison.
NewMaintained
Automatic
◆DevOps & SRE pack
Last verified 8/14/2026
What it changes
Passed 15 of 19 test cases with the skill, and 16 of 19 without it.
Without skill82%
With skill77%
Checks it passed that the model alone missed
Recommends restricting IAM permissions and enforcing Service Control Policies (SCPs) or guardrails.
1 fixed16 passed either way3 still failing2 broke
Pass-rate lift
-5 pp
Tokens
+38%
Agent turns
0%
Response time
-17%
Model gemini-3.6-flashMeasured 8/14/2026v117 of 22 cases passed with skill · 19 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
A test case the skill fixed. Same model, same prompt, with and without the skill.
Prompt
After remediating an unauthorized manual modification to production firewalls, what organizational security controls should be implemented to prevent future manual drift?
What was checked, without and with the skill
Checked
Without skill
With skill
Recommends restricting IAM permissions and enforcing Service Control Policies (SCPs) or guardrails.
Missed
Passed
case-20 · gemini-3.6-flash · 8/14/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md61 lines5 filesincludes scripts
Detecting Infrastructure Drift
Current State
!ls *.tf Dockerfile docker-compose.yml 2>/dev/null || echo 'No IaC files found'
!terraform version 2>/dev/null || echo 'Terraform not installed'
Overview
Detect discrepancies between actual cloud infrastructure state and the desired state defined in IaC (Terraform, CloudFormation, Pulumi). Run drift detection commands, analyze modified/added/deleted resources, generate drift reports with affected resources, and provide remediation steps to bring infrastructure back into compliance.
Prerequisites
IaC configuration files up to date in the project directory
Cloud provider CLI installed and authenticated with read access to all managed resources
Remote state storage accessible and current (S3 backend, Terraform Cloud, Pulumi Cloud)
Read-only IAM permissions for all resource types managed by IaC
Instructions
Identify the IaC tool in use by scanning for .tf files, template.yaml, or Pulumi.yaml
Initialize the IaC tool if needed: terraform init to download providers and configure backend
Run drift detection: terraform plan -detailed-exitcode (exit code 2 = drift detected), aws cloudformation detect-stack-drift, or pulumi preview
Parse the output to identify resources with drift: added (exists in cloud but not in IaC), modified (attributes changed), or deleted (in IaC but missing from cloud)
For each drifted resource, determine if the drift is intentional (manual hotfix) or unintentional (configuration error, unauthorized change)
Generate a structured drift report with resource identifiers, attribute differences, and severity classification
Provide remediation options per resource: terraform apply to enforce desired state, terraform import to adopt changes, or update IaC to match reality
Schedule recurring drift detection: configure a cron job or CI pipeline to run daily and alert on drift
Investigate the root cause: determine who made the manual change and implement guardrails (SCPs, IAM restrictions) to prevent recurrence
Output
Drift detection report with resource-level detail: resource type, ID, drifted attributes, expected vs. actual values
Remediation commands: terraform apply, terraform import, or IaC code updates
CI/CD pipeline step for automated drift detection on a schedule
Alert configuration for drift detection results (Slack, email, PagerDuty)
Prevention recommendations: IAM policy restrictions, SCP guardrails, automated enforcement
Execute this skill enables AI assistant to detect and resolve performance bottlenecks in applications. it analyzes cpu, memory, i/o, and database performance to identify areas of concern. use this skill when you need to diagnose slow application performance, op... Use when optimizing performance. Trigger with phrases like 'optimize', 'performance', or 'speed up'.