qa-iac plugin

Q: How do I install the qa-iac plugin?

In Claude Code run `/plugin marketplace add testland/qa`, then `/plugin install qa-iac@testland-qa`.

Q: Which agents come with qa-iac?

`terraform-plan-reviewer`. Call one with `@agent-qa-iac:terraform-plan-reviewer`.

Q: How do I update or remove the qa-iac plugin?

Update it with `claude plugin update qa-iac@testland-qa` in your shell, or from the Installed tab of `/plugin`. Remove it with `/plugin uninstall qa-iac@testland-qa`.

testland/qa13 starsMITAuthor: testlandsecurity-compliance

Infrastructure-as-code testing: Checkov and Trivy misconfiguration scans, OPA, Conftest and Cedar policy tests, Helm chart tests, Terraform plan review. Trivy config is the tfsec successor, with the legacy tfsec workflow in references. A review agent (terraform-plan-reviewer) flags destructive and security-degrading plan changes. Cross-scanner IaC triage is handled by security-finding-triager in qa-security-scanning.

qa testing iac terraform helm opa checkov tfsec trivy policy-as-code

How to install the qa-iac plugin

Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.

Claude Code

/plugin marketplace add testland/qa
/plugin install qa-iac@testland-qa

What's inside qa-iac

5 parts read from the plugin's own files.

Agents 1

Call as @agent-qa-iac:name

@agent-qa-iac:terraform-plan-reviewersonnet
Use proactively as a PR gate on any terraform plan. Reads the plan JSON and flags resource destruction, broader IAM, public exposure, disabled encryption, drift and risky combinations such as a database destroy plus recreate, with severity and a fix for each.

Skills 4

Claude loads it when the task matches

checkov-policy
No description in the file.
helm-chart-tester
No description in the file.
policy-as-code-runner
No description in the file.
trivy-config
No description in the file.

Using qa-iac in Claude Code

Ask for an agent by name:

Claude Code

@agent-qa-iac:terraform-plan-reviewer

Skills need no command. Claude reads them when your request matches what they describe.

Update, turn off or remove

Update the plugin (shell): claude plugin update qa-iac@testland-qa
Refresh the marketplace: /plugin marketplace update testland-qa
Turn it off for now: /plugin disable qa-iac@testland-qa
Remove it: /plugin uninstall qa-iac@testland-qa

qa-iac plugin questions

How do I install the qa-iac plugin?

In Claude Code run /plugin marketplace add testland/qa, then /plugin install qa-iac@testland-qa.

What does the qa-iac plugin include?

qa-iac bundles 1 agent, 4 skills.

Which agents come with qa-iac?

terraform-plan-reviewer. Call one with @agent-qa-iac:terraform-plan-reviewer.

How do I update or remove the qa-iac plugin?

Update it with claude plugin update qa-iac@testland-qa in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall qa-iac@testland-qa.

What license is the qa-iac plugin under?

MIT, as stated in the plugin's manifest.