# Install kuzco with Homebrew Reviews Terraform and OpenTofu resources and uses AI to suggest improvements. Version 1.9.1 via Homebrew; verified 2026-07-03. ## Install ```sh sudo av install brew:kuzco ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install kuzco ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:kuzco - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.9.1 - **Source summary:** Reviews Terraform and OpenTofu resources and uses AI to suggest improvements - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-03T07:02:52+02:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - kuzco (cli) - kuzco (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.9.1 - Package-manager updated: 2026-07-03 - Local data: ok - Upstream repository: https://github.com/RoseSecurity/Kuzco - Upstream latest detected: v1.9.1 (current) ## Project history and usage Kuzco is a Go CLI from RoseSecurity for reviewing Terraform and OpenTofu resources, comparing them with provider schemas, and asking a local LLM for improvement suggestions. ### Project history The project appeared as an infrastructure-analysis tool in the Terraform/OpenTofu ecosystem. Its README frames the problem as reviewing generated or minimal IaC resources without manually digging through provider documentation, using Ollama-backed local LLMs to recommend safer and more efficient settings. ### Adoption history Kuzco is an early, niche tool in the wave of AI-assisted infrastructure-as-code utilities. The release history shows fast iteration through packaging, prompt customization, a TUI, and command-based workflows rather than long-running ecosystem adoption. ### How it is used Users run the CLI against Terraform or OpenTofu configurations. The README documents Homebrew, Go, Apt, and source installation, requires Ollama for model-backed recommendations, and exposes commands such as `recommend`, `fix`, `list`, and `version`. ### Why package nerds care Kuzco is notable as a small Homebrew-packaged example of local-LLM tooling being inserted into IaC review workflows, next to more established static analyzers such as tfsec and tflint-style tools. ### Timeline - v0.7.0: Added publishing workflow and customizable prompts. - v0.9.0: Added a TUI. - v1.0.0: Introduced `fix` and `recommend` command workflows. ### Related projects - Kuzco is related to Terraform, OpenTofu, Ollama, and static IaC analysis tools such as tfsec and tflint. ### Sources - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** kuzco - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** yes - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [MCP tool packages](https://www.automicvault.com/pkg/mcp-tools/) - Mentions MCP or Model Context Protocol. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [aiac](https://www.automicvault.com/pkg/brew/aiac/) - Shares av.db curated category or tags: ai, cli, cloud-infrastructure, infrastructure-as-code, terraform. - [cdktf](https://www.automicvault.com/pkg/brew/cdktf/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [pug](https://www.automicvault.com/pkg/brew/pug/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [terracognita](https://www.automicvault.com/pkg/brew/terracognita/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [terraform-local](https://www.automicvault.com/pkg/brew/terraform-local/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [terraformer](https://www.automicvault.com/pkg/brew/terraformer/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [yor](https://www.automicvault.com/pkg/brew/yor/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [cdk8s](https://www.automicvault.com/pkg/brew/cdk8s/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code. ## Combined YAML source View the package source record on GitHub. [combined/kuzco.yml](https://github.com/automic-vault/db/blob/main/combined/kuzco.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph