detecting-infrastructure-drift
This skill enables Claude to detect infrastructure drift from a desired state. It uses the `drift-detect` command to identify discrepancies between the current infrastructure configuration and the intended configuration, as defined in infrastructure-as-code tools like Terraform. Use this skill when the user asks to check for infrastructure drift, identify configuration changes, or ensure that the current infrastructure matches the desired state. It is particularly useful in DevOps workflows for maintaining infrastructure consistency and preventing configuration errors. Trigger this skill when the user mentions "drift detection," "infrastructure changes," "configuration drift," or requests a "drift report."
- License 许可
- MIT
- 最近更新
- 2026-11-09
- Stars
- ★ 2
- Forks
- 0
01 前言 Front Matter
- name
- detecting-infrastructure-drift
- description
- This skill enables Claude to detect infrastructure drift from a desired state. It uses the `drift-detect` command to identify discrepancies between the current infrastructure configuration and the intended configuration, as defined in infrastructure-as-code tools like Terraform. Use this skill when the user asks to check for infrastructure drift, identify configuration changes, or ensure that the current infrastructure matches the desired state. It is particularly useful in DevOps workflows for maintaining infrastructure consistency and preventing configuration errors. Trigger this skill when the user mentions "drift detection," "infrastructure changes," "configuration drift," or requests a "drift report."
03 SKILL.md 正文
Overview
This skill empowers Claude to identify and report on deviations between the current state of your infrastructure and its defined desired state. By leveraging the drift-detect command, it provides insights into configuration inconsistencies, helping maintain infrastructure integrity and prevent unexpected issues.
How It Works
- Invocation: The user requests drift detection.
- Drift Analysis: Claude executes the
drift-detectcommand. - Report Generation: The command analyzes the infrastructure and identifies any deviations from the defined configuration.
- Result Presentation: Claude presents a report detailing the detected drift, including affected resources and configuration differences.
When to Use This Skill
This skill activates when you need to:
- Identify infrastructure drift in your environment.
- Ensure that your infrastructure configuration matches the desired state.
- Generate a report detailing discrepancies between the current and desired infrastructure configurations.
Examples
Example 1: Checking for Infrastructure Drift
User request: "Check for infrastructure drift in my production environment."
The skill will:
- Execute the
drift-detectcommand. - Present a report detailing any detected drift, including resource changes and configuration differences.
Example 2: Identifying Configuration Changes
User request: "Are there any configuration changes that haven't been applied to my infrastructure?"
The skill will:
- Execute the
drift-detectcommand. - Provide a summary of configuration changes that are present in the desired state but not reflected in the current infrastructure.
Best Practices
- Regular Monitoring: Schedule regular drift detection checks to proactively identify and address configuration inconsistencies.
- Version Control: Ensure your infrastructure-as-code configurations are version-controlled to track changes and facilitate rollbacks.
- Automated Remediation: Implement automated remediation workflows to automatically correct detected drift and maintain infrastructure consistency.
Integration
This skill can be integrated with other DevOps tools and plugins to automate infrastructure management workflows. For example, it can be used in conjunction with configuration management tools like Ansible or Puppet to automatically remediate detected drift. It also complements infrastructure-as-code tools like Terraform by providing a mechanism for verifying that the deployed infrastructure matches the defined configuration.
04 同仓库更多 Skills
Docs Research
Use MCP Central Docs server to search, ask, and retrieve documentation (FastMCP, standards, packaging).
wrappee-drift
Read-only, single-repo audit of a repo's tool coverage against the software it wraps (its current real API/docs, not training-data memory) and against comparable/competing wrappers. Trigger when the user says "wrappee drift" followed by a repo name, "capability audit" followed by a repo name, or asks whether a repo is missing features the wrapped software or a competitor now has. Always scoped to one named repo per invocation -- never trigger this fleet-wide or unprompted; that is explicitly against the SOP. Do NOT trigger for internal fleet-standard compliance (that is drift-scan) or strategic worth/archive decisions (that is quality-check) -- this is specifically about the gap between the repo's tool list and the wrapped software's/competitors' actual current capabilities.
modules
暂无简介
mcp-standards
Use when developing MCP servers to access comprehensive standards for scaffolding, packaging, sampling, documentation, testing, error handling, monitoring, and CI/CD workflows.
webapp-cua-test
Run the pre-Tauri CUA click-through test (real browser, dev stack, OCR "Connected" wait, sidebar nav walk) for a fleet MCP server repo under D:\Dev\repos. Trigger when the user says "cua webapp test" or "webapp clickthrough" followed by a repo name, asks for an e2e click-through of a webapp, or asks whether a webapp boots and connects in a real browser. Not for the installed NSIS app (that is the nsis-build skill / cua-nsis-test) and not for DOM assertions (Playwright), and not for hunting fake data or dead buttons (fakefind).
ship
Final release gate for a fleet MCP server repo under D:\Dev\repos -- run all quality gates, build the release artifact, verify it, commit, push, and cut a GitHub release. Trigger this whenever the user says "ship it", "ship" followed by a repo name, "release" followed by a repo name, or asks to finalize and publish work that's already been done in a repo. This is the terminal step after assfix/nsis-build, not a substitute for them -- if the repo hasn't been assessed recently, say so before shipping rather than shipping blind.