terravision
Cloud architecture diagrams in both directions: AI prompt or JSON to diagram, diagram to Terraform via MCP server, and Terraform to diagram via CLI or CI/CD. Using Official AWS, Azure and GCP icons.
No outside reports on file
Use this tool only for non-sensitive architecture planning, never include real credentials in prompts, and always review generated Terraform code before deploying to production.
Based on public adoption and transparency signals as of Oct 19, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (patrickchugh/terravision)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/patrickchugh/terravision ↗
About Terravision
Terravision converts between cloud architecture diagrams and infrastructure code (Terraform). You can generate diagrams from AI prompts or JSON, convert diagrams back to Terraform code, and use it as a Claude Desktop plugin. It uses official cloud provider icons from AWS, Azure, and GCP.
Who it’s for
Cloud engineers and DevOps teams who want to visualize infrastructure as code or quickly sketch cloud designs into working Terraform. It's for people who use Claude as an AI assistant and want to automate diagram-to-code workflows.
Alternatives
- Diagrams (Python library): Code-first infrastructure visualization without AI integration.
- Lucidchart or Draw.io: Manual cloud architecture diagramming with official icon sets.
- Pulumi CLI: Infrastructure as code tool with diagram export capabilities.
- CloudCraft: Web-based cloud architecture designer with some code generation features.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README for detailed installation. The tool appears to work as an MCP server for Claude Desktop and as a CLI tool, but exact setup steps should be verified in the official repository documentation.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 1.7k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
No reports found for this package in our research (last checked 2026-10-29).
Risks to watch for
- Infrastructure exposure: The tool processes your cloud architecture diagrams, which may reveal your system design, resource types, regions, and configuration details to the AI model and plugin.
- Terraform code generation: AI-generated infrastructure code might contain misconfigurations, missing security settings, or resource exposure if prompts are imprecise.
- Diagram injection attacks: Malicious diagram files could include hidden data in metadata or structure to trick the AI into generating unsafe infrastructure.
- Credential handling: If you paste API keys, connection strings, or secrets into prompts or diagrams, they could be logged or exposed.
- Unverified dependencies: The tool's dependencies and supply chain haven't been independently audited for security issues.
How to lower the risk
Least-privilege permissions
- Run the MCP server with minimal cloud credentials; use read-only roles where possible.
- Test generated Terraform in non-production environments first.
Network isolation
- Keep sensitive architectural data out of public diagrams and conversations.
- Don't store or share diagrams containing real resource IDs or IP ranges.
Monitoring
- Review generated Terraform for security group rules, IAM policies, and data exposure.
- Log and audit what infrastructure changes are deployed from this tool.
Red flags to watch for
- AI output that creates overly permissive security rules or public-facing resources.
- Diagrams or prompts that accidentally leak production details or naming conventions.
Questions
How do I install Terravision?
Terravision does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/patrickchugh/terravision.
Are there security reports about Terravision?
No reports found for this package in our research (last checked 2026-10-29). Terravision currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include infrastructure exposure, terraform code generation, diagram injection attacks.
Is Terravision actively maintained?
Terravision has 1.7k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/patrickchugh/terravision before pinning it in production.
What are alternatives to Terravision?
Notable alternatives to Terravision include Diagrams (Python library) (Code-first infrastructure visualization without AI integration), Lucidchart or Draw.io (Manual cloud architecture diagramming with official icon sets), Pulumi CLI (Infrastructure as code tool with diagram export capabilities), CloudCraft (Web-based cloud architecture designer with some code generation features). You can also compare Terravision side by side with other skills in the Related tools section on this page.
README badge and team notes
Maintain or use Terravision? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/patrickchugh-terravision)HTML embed:
<a href="https://agentarmorhq.com/skills/patrickchugh-terravision"><img src="https://agentarmorhq.com/api/badge/patrickchugh-terravision" alt="AgentArmorHQ Risk Grade for Terravision" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "patrickchugh-terravision"Share with your security lead
Need sign-off to use terravision? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: terravision
- **Listing URL:** https://agentarmorhq.com/skills/patrickchugh-terravision
- **Type:** AI agent skill
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 1.7k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (patrickchugh/terravision)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/patrickchugh/terravision
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 19, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- AI agent skill
- Publisher
- patrickchugh
- Source code
- github.com/patrickchugh/terravision
- Est. context load
- ~76 tokens idle · ~450 tokens when active (on-demand skill)
- Popularity
- 1.7k GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-19
Community
Discussions for Terravision
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude