DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
cyberstrikeus Skill Cis Eks V170 4 4 2Consider external secret storage (Manual)
- cyberstrikeus Skill Cis Eks V170 4 5 1
Create administrative boundaries between resources using namespaces (Manual)
- cyberstrikeus Skill Cis Eks V170 4 5 2
The default namespace should not be used (Automated)
- cyberstrikeus Skill Cis Eks V170 5 1 1
Ensure Image Vulnerability Scanning using Amazon ECR image scanning or a third party provider (Automated)
- cyberstrikeus Skill Cis Eks V170 5 1 2
Minimize user access to Amazon ECR (Manual)
- cyberstrikeus Skill Cis Eks V170 5 1 3
Minimize cluster access to read-only for Amazon ECR (Manual)
- cyberstrikeus Skill Cis Eks V170 5 1 4
Minimize Container Registries to only those approved (Manual)
- cyberstrikeus Skill Cis Eks V170 5 2 1
Prefer using dedicated EKS Service Accounts (Automated)
- cyberstrikeus Skill Cis Eks V170 5 3 1
Ensure Kubernetes Secrets are encrypted using Customer Master Keys (CMKs) managed in AWS KMS (Manual)
- cyberstrikeus Skill Cis Eks V170 5 4 1
Restrict Access to the Control Plane Endpoint (Automated)
- cyberstrikeus Skill Cis Eks V170 5 4 2
Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled (Automated)
- cyberstrikeus Skill Cis Eks V170 5 4 3
Ensure clusters are created with Private Nodes (Automated)
- cyberstrikeus Skill Cis Eks V170 5 4 4
Ensure Network Policy is Enabled and set as appropriate (Automated)
- cyberstrikeus Skill Cis Eks V170 5 4 5
Encrypt traffic to HTTPS load balancers with TLS certificates (Manual)
- cyberstrikeus Skill Cis Eks V170 5 5 1
Manage Kubernetes RBAC users with AWS IAM Authenticator for Kubernetes or Upgrade to AWS CLI v1.16.156 or greater (Manual)
- cyberstrikeus Skill Cis K8S V1111 2 3
Ensure that the --client-cert-auth argument is set to true (Automated)
- cyberstrikeus Skill Cis K8S V1111 2 4
Ensure that the --auto-tls argument is not set to true (Automated)
- cyberstrikeus Skill Cis K8S V1110 1 2 3
Ensure that the DenyServiceExternalIPs is set (Manual)
- cyberstrikeus Skill Cis K8S V1110 1 2 6
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
- cyberstrikeus Skill Cis K8S V1110 1 2 7
Ensure that the --authorization-mode argument includes Node (Automated)
- cyberstrikeus Skill Cis K8S V1110 1 2 8
Ensure that the --authorization-mode argument includes RBAC (Automated)
- cyberstrikeus Skill Cis K8S V1110 1 2 9
Ensure that the admission control plugin EventRateLimit is set (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 1 1
Ensure that the cluster-admin role is only used where required (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 1 6
Ensure that Service Account Tokens are only mounted where necessary (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 1 7
Avoid use of system:masters group (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 1 8
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 1 9
Minimize access to create persistent volumes (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 2 1
Ensure that the cluster has at least one active policy control mechanism in place (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 2 2
Minimize the admission of privileged containers (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 2 3
Minimize the admission of containers wishing to share the host process ID namespace (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 2 6
Minimize the admission of containers with allowPrivilegeEscalation (Manual)
-
j4flmao Bundle Management HiringUse this skill when the user says 'hiring', 'interviewing', 'technical interview', 'coding interview', 'system design interview', 'interview rubric', 'candidate assessment', 'interview debrief', 'offer decision', 'interview process', 'phone screen', 'onsite interview', 'behavioral interview', 'HackerRank', 'CodeSignal', 'interview pipeline', 'candidate evaluation', 'interview scoring', 'anti-bias hiring'. This skill enforces: structured interview rubrics with scoring criteria per skill dimension, multi-format technical assessment (coding, system design, debugging), behavioral evaluation aligned to company values using STAR method, consistent debrief process with calibration, data-driven offer decisions using decision matrix, anti-bias practices, and positive candidate experience. Do NOT use for: performance reviews, career development, or team structuring.
- j4flmao Bundle Data Data Platform
Use this skill when designing end-to-end data platforms: data lake architecture, data lakehouse architecture, distributed storage (S3, ADLS, GCS), distributed compute (Spark, Trino, Presto), data catalog (Datahub, Amundsen, Marquez), data mesh, data versioning (LakeFS, DVC), data virtualization (Dremio, Starburst). This skill enforces: platform architecture selection, storage/compute separation, catalog implementation, data mesh boundaries, version control for data. Do NOT use for: individual ETL pipelines (use etl-pipeline), streaming infrastructure (use streaming), BI tools (use bi-tools), data warehouse modeling (use data-warehouse).
- j4flmao Bundle Data Search Engine
Use this skill when asked about Elasticsearch, OpenSearch, Solr, search engine, full-text search, inverted index, indexing, search analytics, aggregation, cluster management, or shard routing. This skill enforces: Elasticsearch architecture (node types, shards, replicas), indexing strategy (mapping, analysis, tokenization), search queries (full-text, term, bool, fuzzy), aggregations (metric, bucket, pipeline), cluster management (node roles, shard allocation, ILM), OpenSearch differences, and performance tuning. Do NOT use for: relational database queries, graph traversals, or key-value lookups.
- j4flmao Bundle Cilium Ebpf
Use this skill when the user says 'Cilium', 'eBPF', 'BPF', 'Hubble', 'service mesh', 'network policy', 'cluster mesh', 'eBPF observability', 'kube-proxy replacement', 'CiliumNetworkPolicy', 'CiliumClusterWideNetworkPolicy', 'CiliumEndpoint', 'Hubble UI', 'Tetragon', 'Cilium CNI'. Covers: Cilium CNI installation, eBPF-based networking, network policies, Hubble observability, cluster mesh (multi-cluster), service mesh (L7 policies), kube-proxy replacement, bandwidth management, encryption (Wireguard/IPsec). Do NOT use for: generic Kubernetes networking (use kubernetes-patterns), traditional CNI plugins (Calico, Flannel).
- j4flmao Bundle Ml Computer Vision
Use this skill when building computer vision systems for image classification, object detection, segmentation, or image preprocessing/augmentation. This skill enforces: task selection (classification/detection/segmentation), model choice by task and budget, image preprocessing pipeline, augmentation strategy, training config with metrics (mAP, IoU), inference optimization. Do NOT use for: video streaming analytics, OCR (use separate OCR skill), medical imaging (requires domain-specific skill), NLP with image captions (use ml-nlp).
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cis-eks-v170-4.4.2, cis-eks-v170-4.5.1, cis-eks-v170-4.5.2. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.