DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
cyberstrikeus Skill Cis Aks V180 4 1 11Minimize access to webhook configuration objects (Manual)
Audited - cyberstrikeus Skill Cis Aks V180 4 1 12
Minimize access to the service account token creation (Manual)
- cyberstrikeus Skill Cis GCP Cos 1 6
Ensure AppArmor is installed
Audited - cyberstrikeus Skill Cis GCP Cos 4 2
Ensure logrotate is configured
Audited - cyberstrikeus Skill Cis GCP Cos 5 4
Ensure root login is restricted to system console
Audited - cyberstrikeus Skill Cis GCP Cos 5 5
Ensure access to the su command is restricted
Audited - cyberstrikeus Skill Cis Tomcat101 9 2
Disable deploy on startup of applications (Automated)
Audited - cyberstrikeus Skill Cis Tomcat7 V100 9 3
Disable deploy on startup of applications
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 1 2
Minimize access to secrets (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V100 4 1 7
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 1 8
Avoid bindings to system:anonymous (Automated)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 1 9
Avoid non-default bindings to system:unauthenticated (Automated)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 2 1
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 3 1
Ensure that all Namespaces have Network Policies defined (Automated)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 4 1
Consider external secret storage (Manual)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 5 1
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
Audited - cyberstrikeus Skill Cis Gke Autopilot V100 4 6 3
Apply Security Context to Pods and Containers (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 17
Ensure that the --insecure-port argument is set to 0 (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 18
Ensure that the --secure-port argument is not set to 0 (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 19
Ensure that the healthz endpoint is protected by RBAC (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 20
Ensure that the --audit-log-path argument is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 21
Ensure that the audit logs are forwarded off the cluster for retention (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 22
Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 23
Ensure that the maximumFileSizeMegabytes argument is set to 100 (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 24
Ensure that the --request-timeout argument is set (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 25
Ensure that the --service-account-lookup argument is set to true (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 26
Ensure that the --service-account-key-file argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 27
Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 28
Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 29
Ensure that the --client-ca-file argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 30
Ensure that the --etcd-cafile argument is set as appropriate (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 31
Ensure that encryption providers are appropriately configured (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 32
Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 1 2 33
Ensure unsupported configuration overrides are not used (Manual)
Audited - cyberstrikeus Skill Cis Ocp V160 4 1 10
Ensure that the kubelet configuration file ownership is set to root:root (Automated)
Audited - cyberstrikeus Skill Cis Ocp V160 4 2 10
Ensure that the --rotate-certificates argument is not set to false (Manual)
Audited
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cis-aks-v180-4.1.11, cis-aks-v180-4.1.12, cis-gcp-cos-1.6. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.