DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
j4flmao Skill Ansible AutomationAnsible Configuration Management
- j4flmao Skill Terraform Patterns
Terraform IaC Patterns
- j4flmao Bundle Devops Kubernetes Autoscaling
Kubernetes autoscaling strategies and configurations. Covers: Horizontal Pod Autoscaler (HPA) with CPU/memory, custom, and external metrics, Vertical Pod Autoscaler (VPA) update modes and recommender, Keda with 50+ scalers, Cluster Autoscaler node group optimization, combined HPA+VPA+CA strategies, predictive scaling, and cost optimization. Do NOT use for: Non-Kubernetes autoscaling (AWS ASG, Azure VMSS, etc.).
- j4flmao Bundle Devops Network Infrastructure
Use this skill when designing or operating production network infrastructure: BGP, anycast, ECMP, leaf-spine fabric, EVPN/VXLAN, MPLS, SD-WAN, VRRP/HSRP/CARP, jumbo frames, QoS, multi-WAN, NAT, IPv6 dual-stack, transit-vs-peering, internet exchanges (IX). Applies to colo, on-prem DC, hybrid cloud, and edge POPs. This skill enforces: redundant uplinks, BGP best-practice (origin AS, prefix filtering, MED/LOCAL_PREF policy), leaf-spine non-blocking, MTU consistency, and verifiable failover. Do NOT use for: cloud-native VPC/Transit Gateway (see devops-aws / devops-gcp / devops-azure), service mesh (see devops-service-mesh), or app-level load balancing (see enterprise-high-availability).
- j4flmao Bundle Storage Infrastructure
Use this skill when the user says 'storage', 'SAN', 'NAS', 'NVMe', 'NVMe-oF', 'iSCSI', 'FC', 'Fibre Channel', 'Ceph', 'glusterfs', 'minio', 'LUN', 'volume', 'ZFS', 'ZoL', 'RAID', 'JBOD', 'HDD', 'SSD', 'NAND', 'flash', '3D XPoint', 'Optane', 'SATA', 'SAS', 'NVMe', 'M.2', 'U.2', 'E1.S', 'E3.S', 'EBOF', 'JBOF', 'storage-class', 'PersistentVolume', 'PVC', 'CSI', 'storage policy', 'software-defined storage', 'SDS', 'distributed storage', 'object storage', 'block storage', 'file storage', 'backup', 'snapshot', 'clone', 'deduplication', 'compression', 'thin provisioning', 'overprovisioning', 'TRIM', 'discard', 'wear leveling', 'write amplification', 'read cache', 'write cache', 'battery-backed write cache', 'BBWC', 'NVDIMM', 'storage tiering', 'tiered storage', 'hot tier', 'cold tier', 'archive tier', 'storage performance', 'IOPS', 'throughput', 'latency', 'iostat', 'fio', 'blktrace', 'seekwatcher'. Covers: Storage architecture, protocols, RAID levels, NVMe, software-defined storage with Ceph, CSI drivers for K8s, b
- j4flmao Bundle Backend File Storage
Use this skill when designing file upload, storage, CDN delivery, or file processing systems. This skill enforces: direct-to-storage uploads via presigned URLs, flat key design with no sensitive data, server-side validation, CDN caching with version hashes. Applies to S3, Azure Blob, GCS, or any S3-compatible storage. Do NOT use for: database blob storage, application server file handling, or ephemeral temporary files.
- j4flmao Bundle Cloud Cost Optimization
Deeply enhances cloud cost optimization Spot Instance lifecycle management
- j4flmao Skill Ebpf Observability
Kernel-level monitoring and tracing using eBPF.
- j4flmao Skill Kubernetes Mastery
Advanced K8s Operators and Helm Charts development.
- j4flmao Bundle Asset Pipeline
Expert game asset pipeline — asset system lifecycle, import/cook pipeline, streaming & hot-reload, reference counting, virtual filesystem, and shader pipeline management.
- j4flmao Bundle Distributed Tracing
Distributed Tracing & Observability
- j4flmao Bundle Kubernetes Patterns
Advanced Kubernetes Patterns
-
cyberstrikeus Skill Cis K8S V1110 5 2 7Minimize the admission of root containers (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 2 8
Minimize the admission of containers with the NET_RAW capability (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 3 2
Ensure that all Namespaces have Network Policies defined (Manual)
- cyberstrikeus Skill Cis K8S V1110 5 5 1
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
- cyberstrikeus Skill Cis K8S V1111 1 3 2
Ensure that the --profiling argument is set to false (Automated)
- cyberstrikeus Skill Cis K8S V1111 1 3 3
Ensure that the --use-service-account-credentials argument is set to true (Automated)
- cyberstrikeus Skill Cis K8S V1111 1 3 4
Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)
- cyberstrikeus Skill Cis K8S V1111 1 3 5
Ensure that the --root-ca-file argument is set as appropriate (Automated)
- cyberstrikeus Skill Cis K8S V1111 1 3 6
Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)
- cyberstrikeus Skill Cis K8S V1111 1 4 1
Ensure that the --profiling argument is set to false (Automated)
- cyberstrikeus Skill Cis K8S V1111 3 2 1
Ensure that a minimal audit policy is created (Manual)
- cyberstrikeus Skill Cis K8S V1111 4 1 1
Ensure that the kubelet service file permissions are set to 600 or more restrictive (Automated)
- cyberstrikeus Skill Cis K8S V1111 4 1 2
Ensure that the kubelet service file ownership is set to root:root (Automated)
- cyberstrikeus Skill Cis K8S V1111 4 1 4
If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)
- cyberstrikeus Skill Cis K8S V1111 4 1 6
Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)
- cyberstrikeus Skill Cis K8S V1111 4 1 8
Ensure that the client certificate authorities file ownership is set to root:root (Manual)
- cyberstrikeus Skill Cis K8S V1111 4 2 2
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
- cyberstrikeus Skill Cis K8S V1111 4 2 3
Ensure that the --client-ca-file argument is set as appropriate (Automated)
- cyberstrikeus Skill Cis K8S V1111 4 2 6
Ensure that the --make-iptables-util-chains argument is set to true (Automated)
- cyberstrikeus Skill Cis K8S V1111 4 2 8
Ensure that the eventRecordQPS argument is set to a level which ensures appropriate event capture (Manual)
- cyberstrikeus Skill Cis K8S V1111 4 3 1
Ensure that the kube-proxy metrics service is bound to localhost (Manual)
- cyberstrikeus Skill Cis K8S V1110 1 2 10
Ensure that the admission control plugin AlwaysAdmit is not set (Automated)
- cyberstrikeus Skill Cis K8S V1110 1 2 11
Ensure that the admission control plugin AlwaysPullImages is set (Manual)
- cyberstrikeus Skill Cis K8S V1110 1 2 12
Ensure that the admission control plugin ServiceAccount is set (Automated)
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include ansible-automation, terraform-patterns, devops-kubernetes-autoscaling. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.