DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
findscripter Skill Cloud Penetration Testing当需要对 Azure/AWS/GCP 云环境做授权安全评估时使用;做侦察、认证、资源枚举、提权、数据提取、持久化并产出评估报告与加固建议;不适用于无书面授权的测试、动产线客户数据或纯本地主机渗透;触发词:云渗透、Azure/AWS/GCP、IAM 枚举、元数据服务、密钥泄露
-
findscripter Skill Strategy Backtest Expert当要系统化压力测试/验证交易策略稳健性、判断一个回测能否上实盘、排查"看着太好"的可疑结果时使用;做"往死里测"方法论编排(假设零裁量化、参数平台而非尖峰、滑点摩擦加码、样本外步进、红旗清单)并用评分脚本产出 Deploy/Refine/Abandon 裁决;不适用于搭建回测引擎代码、采集行情数据、实盘下单或主观裁量交易;触发词:回测验证、压力测试、稳健性、过拟合、曲线拟合、前视偏差、幸存者偏差、滑点、样本外、走向前、参数敏感、回测评分。
-
findscripter Skill Bash Defensive Patterns当编写生产级 Bash 脚本、CI/CD 流水线或系统运维工具、需要容错与安全时使用;做严格模式、入参校验、错误陷阱/清理、日志与 dry-run 的防御式编码并产出可复用脚本模式;不适用于一次性临时命令或必须严格 POSIX sh 的环境;触发词:bash脚本、set -Eeuo pipefail、shell容错
-
findscripter Skill Hybrid Cloud Networking当需要打通本地数据中心与公有云(AWS/Azure/GCP)的网络时使用;做选型 VPN/专线、用 Terraform 配置网关与 BGP 路由、设计 Hub-Spoke/多云拓扑并落实高可用与安全基线;不适用于纯云内网络、应用层组网或与混合云互联无关的任务;触发词:本地连云、VPN、专线、ExpressRoute、Direct Connect、BGP、混合云
-
findscripter Skill Agent Workflow Builder当需要为 Claude Code 的 Workflow 工具编写确定性、可恢复的多智能体编排脚本(.claude/workflows/ 下的 .js 文件),把任务扇出给全新上下文子智能体时使用;做需求 intake、拓扑选型并产出可运行的工作流脚本(扇出/流水线/循环/评审团);不适用于单智能体单任务(用 Agent)或需模型动态决定步骤的可复用流程(用 Skill)。触发词:工作流编排、workflow、多智能体、子智能体编排、fan-out、pipeline、judge-panel、agent fan-out、orchestrate sub-agents
-
findscripter Skill Alphafold Database Access当需要按 UniProt ID 获取 AlphaFold 预测的蛋白 3D 结构、置信度或批量蛋白组数据时使用;用 BioPython/REST API/Google Cloud 下载 mmCIF/PDB 并分析 pLDDT 与 PAE,产出结构文件、置信度报告与高可信区域。不适用于实验结构(用 PDB)或自行跑预测(用 ColabFold/本地 AlphaFold)。触发词:AlphaFold、UniProt、pLDDT、PAE、蛋白结构预测、蛋白组下载
-
findscripter Skill Recsys Pipeline Architect当要为「给定(用户,上下文)挑出 Top K 条目」的系统(信息流/推荐/RAG 重排/任务优先级/通知分诊/搜索与广告排序)设计或重构管线时使用;做六阶段编排(Source 取源→Hydrator 富化→Filter 过滤→Scorer 打分→Selector 选取→SideEffect 副作用),权衡单分值vs多动作、隔离vs联合、在线vs离线,产出可直接运行的脚手架(TS/Go/Python);不适用于模型本身(双塔检索、Embedding 训练、Transformer 设计)与纯训练管线;触发词:推荐系统、排序管线、for you 信息流
-
findscripter Skill GCP Cloud Architect当需要为创业公司或企业设计 Google Cloud 架构、上线 Cloud Run/GKE、搭建 BigQuery 数据管道或优化 GCP 成本时使用;按需求选型架构模式并产出 Terraform/gcloud/Cloud Build 的 IaC 与成本优化清单;不适用于 AWS/Azure 或非云端本地部署。触发词:GCP、Cloud Run、GKE、BigQuery、成本优化
-
findscripter Skill Turborepo Caching当在 monorepo 中配置 Turborepo、设计 pipeline 任务依赖、接入本地/远程缓存或在 CI 中按变更过滤构建时使用;产出 turbo.json 任务编排、远程缓存接入(Vercel 或自托管)、--filter 范围控制与缓存命中调试方案;不适用于非 Turborepo 单仓工具(Nx/Bazel/Rush 等)或单工程小项目。触发词:Turborepo、turbo.json、远程缓存、monorepo
-
findscripter Skill Firebase Apk Scanner当需要审计 Android APK 的 Firebase 后端安全配置时使用;反编译 APK、提取 Firebase 配置并测试 Auth/数据库/存储/云函数/Remote Config 端点,产出漏洞与修复清单;不适用于无授权目标、iOS/Web 应用或仅提取配置不测试的场景;触发词:firebase apk 扫描、apk firebase 漏洞、firebase 安全审计、firebaseio 数据库、firestore 越权、storage bucket、cloud functions、mobile security audit
-
findscripter Skill Terraform Specialist当用 Terraform/OpenTofu 设计模块、管理远程 state、搭建多环境/多云 IaC 与策略即代码流水线时使用;做模块化架构、远程后端加锁加密、plan/apply 评审与漂移成本治理并产出可复现的 IaC 工程;不适用于一次性手动改基础设施、被锁定到其他 IaC 工具、或无法远程安全存储 state 的场景;触发词:terraform、opentofu、iac、基础设施即代码、tfstate、远程后端、状态锁、漂移、tfsec、checkov、多云
-
findscripter Skill Drizzle Orm Expert当用 TypeScript 搭建类型安全数据库层时使用;做 Drizzle 表结构/关系定义、关系查询、Drizzle Kit 迁移与 Serverless 客户端接入并产出可运行代码;不适用于 Prisma/TypeORM 等非 Drizzle 栈或纯运维调优;触发词:drizzle、schema、pgTable、drizzle-kit、relations、Neon/Turso
-
findscripter Skill Gitops Argocd Flux当用 ArgoCD 或 Flux 把 Git 仓库作为 Kubernetes 集群唯一可信源、需要声明式持续交付时使用;产出仓库布局、Application/Kustomization 清单、同步策略与渐进发布配置;不适用于一次性手动部署、非 K8s 目标或无集群/仓库权限的场景。触发词:GitOps、ArgoCD、Flux
-
findscripter Skill Shellcheck Linting当为 shell 脚本配置静态检查、修脚本告警或在 CI/CD 接入 lint 时使用;做安装/配置 .shellcheckrc、按 SC 码定位修复、抑制误报、接 pre-commit 与 CI 并产出可复用配置与门禁脚本;不适用于非 shell 脚本或运行期测试;触发词:shellcheck、.shellcheckrc、SC2086
-
findscripter Skill RAG Implementation Workflow当要把 RAG 系统从需求落到上线、按阶段推进(嵌入选型、向量库、分块、检索、生成、缓存、评估)时使用;做产出分阶段实施清单+质量门禁+各阶段交付物;不适用于已知技术栈只差具体编码(用 rag-pipeline-builder)、小语料直接塞上下文、需实时计算/查结构化库的场景;触发词:RAG 落地、检索增强工作流、嵌入选型、向量库搭建、RAG 评估
-
findscripter Skill Operator Audit Review当需要审计 Kubernetes Operator 仓库(CRD 设计、Go reconcile 循环、OperatorHub 能力等级)或上线前做合规复盘时使用;做 CRD 校验、reconcile 反模式 lint、能力等级评分,产出按检查项分级(FAIL/WARN/PASS)的 Markdown 报告与进阶步骤;不适用于纯 Helm 打包、普通 kubectl 运维、通用 k8s 安全或非 Operator 工作负载;触发词:operator 审计、CRD 校验、reconcile lint、能力等级、operator-audit、kubebuilder
-
findscripter Skill K8S Security Policies当为 Kubernetes 集群做纵深防御加固时使用;用 Pod 安全标准、NetworkPolicy、RBAC、准入控制(OPA Gatekeeper/Istio mTLS)落地最小权限与网络分段配置并验证;不适用于应用部署、性能调优或非安全类清单生成。触发词:NetworkPolicy、RBAC、Pod 安全标准、准入控制、多租户隔离
-
findscripter Skill Agentmail Email Infra何时使用
-
findscripter Skill Azure Cloud Architect当为初创/企业设计 Azure 基础设施、写 Bicep/ARM、做成本优化、配 Azure DevOps/GitHub Actions 流水线或迁移上云时使用;产出架构模式选型、Bicep IaC 模板、成本与安全评审清单;不适用于 AWS/GCP 选型、应用代码开发或具体业务建模;触发词:Azure、Bicep、AKS、App Service、Functions、Cosmos DB、成本优化
-
findscripter Skill Github Actions Author当需要为仓库搭建 GitHub Actions 持续集成/部署(CI/CD)流水线时使用;产出可直接落地的 .github/workflows/*.yml(测试、构建推送镜像、K8s 部署、矩阵构建、安全扫描、可复用工作流、审批门禁);不适用于 GitLab CI、Jenkins 等非 GitHub 平台或运行时业务代码;触发词:github actions、workflow、工作流、ci/cd、流水线、自动化测试部署、matrix matrix构建、可复用工作流
-
findscripter Skill Deployment Engineer当设计/改进 CI/CD 流水线、落地 GitOps 与渐进式交付、做零停机发布时使用;产出含质量门禁/审批、回滚与可观测性的发布方案与流水线配置;不适用于纯本地开发自动化或不涉及部署管线的功能开发;触发词:CI/CD、GitOps、渐进式交付、蓝绿、金丝雀、零停机、ArgoCD
-
brathod1432 Bundle Senior DevopsComprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup, infrastructure as code, deployment automation, and monitoring. Use when setting up pipelines, deploying applications, managing infrastructure, implementing monitoring, or optimizing deployment processes.
-
brathod1432 Bundle Senior SecopsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automates compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR. Use when conducting a security review or audit, responding to a CVE or security incident, hardening infrastructure, implementing authentication or secrets management, running penetration test prep, checking OWASP Top 10 exposure, or enforcing security controls in CI/CD pipelines.
-
brathod1432 Bundle Cloud SecurityUse when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.
-
brathod1432 Bundle Playwright ProProduction-grade Playwright testing toolkit. Use when the user mentions Playwright tests, end-to-end testing, browser automation, fixing flaky tests, test migration, CI/CD testing, or test suites. Generate tests, fix flaky failures, migrate from Cypress/Selenium, sync with TestRail, run on BrowserStack. 55 templates, 3 agents, smart reporting.
-
brathod1432 Bundle Content ProductionFull content production pipeline — takes a topic from blank page to published-ready piece. Use when you need to execute content: write a blog post, article, or guide end-to-end. Triggers: 'write a post about', 'draft an article', 'create content for', 'help me write', 'I need a blog post'. NOT for content strategy or calendar planning (use content-strategy). NOT for repurposing existing content (use content-repurposing). NOT for social captions only.
-
brathod1432 Bundle Prompt GovernanceUse when managing prompts in production at scale: versioning prompts, running A/B tests on prompts, building prompt registries, preventing prompt regressions, or creating eval pipelines for production AI features. Triggers: 'manage prompts in production', 'prompt versioning', 'prompt regression', 'prompt A/B test', 'prompt registry', 'eval pipeline'. NOT for writing or improving individual prompts (use senior-prompt-engineer). NOT for RAG pipeline design (use rag-architect). NOT for LLM cost reduction (use llm-cost-optimizer).
-
brathod1432 Bundle Docker DevelopmentDocker and container development agent skill and plugin for Dockerfile optimization, docker-compose orchestration, multi-stage builds, and container security hardening. Use when: user wants to optimize a Dockerfile, create or improve docker-compose configurations, implement multi-stage builds, audit container security, reduce image size, or follow container best practices. Covers build performance, layer caching, secret management, and production-ready container patterns.
-
brathod1432 Bundle Phantombuster AutomationAutomate lead generation, web scraping, and social media data extraction workflows through PhantomBuster's cloud platform via Composio
-
brathod1432 Bundle Big Data Cloud AutomationAutomate Big Data Cloud tasks via Rube MCP (Composio). Always search tools first for current schemas.
-
brathod1432 Bundle Influxdb Cloud AutomationAutomate Influxdb Cloud tasks via Rube MCP (Composio). Always search tools first for current schemas.
-
brathod1432 Bundle Icims Talent Cloud AutomationAutomate Icims Talent Cloud tasks via Rube MCP (Composio). Always search tools first for current schemas.
-
brathod1432 Bundle Google Cloud Vision AutomationAutomate Google Cloud Vision tasks via Rube MCP (Composio). Always search tools first for current schemas.
-
brathod1432 Bundle Salesforce Service Cloud AutomationAutomate Salesforce Service Cloud tasks via Rube MCP (Composio). Always search tools first for current schemas.
-
javimosch Skill AppdeployDeploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publish a website or web app and wants a public URL. Uses HTTP API via curl.
-
javimosch Skill Jarvis Mission ControlSet up JARVIS Mission Control v2.0.7 — a free, open-source AI agent coordination hub by MissionDeck.ai. Kanban board, real-time WebSocket updates, team chat, scheduled job visibility, agent SOUL editor, Claude Code session tracking, GitHub Issues sync, SQLite-backed webhook delivery with circuit breaker, CSRF + rate limiting. Fork the repo, start the server, open the dashboard. No cloud account required. Instruction-only skill — all code runs on YOUR server from open-source GitHub repo. No code execution in skill. Security-audited: 0 HIGH, 0 CRITICAL. See SECURITY.md for full audit.
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cloud-penetration-testing, strategy-backtest-expert, bash-defensive-patterns. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.