DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
cyberstrikeus Skill Cis Eks V180 4 3 1Ensure CNI plugin supports network policies (Manual)
- cyberstrikeus Skill Cis Eks V180 4 4 1
Prefer using secrets as files over secrets as environment variables (Automated)
- cyberstrikeus Skill Cis Eks V180 4 4 2
Consider external secret storage (Manual)
- cyberstrikeus Skill Cis Eks V180 4 5 1
Create administrative boundaries between resources using namespaces (Manual)
- cyberstrikeus Skill Cis Eks V180 4 5 2
The default namespace should not be used (Automated)
- cyberstrikeus Skill Cis Eks V180 5 1 1
Ensure Image Vulnerability Scanning using Amazon ECR image scanning or a third party provider (Automated)
- cyberstrikeus Skill Cis Eks V180 5 1 2
Minimize user access to Amazon ECR (Manual)
- cyberstrikeus Skill Cis Eks V180 5 1 3
Minimize cluster access to read-only for Amazon ECR (Manual)
- cyberstrikeus Skill Cis Eks V180 5 1 4
Minimize Container Registries to only those approved (Manual)
- cyberstrikeus Skill Cis Eks V180 5 2 1
Prefer using dedicated EKS Service Accounts (Automated)
- cyberstrikeus Skill Cis Eks V180 5 3 1
Ensure Kubernetes Secrets are encrypted using Customer Master Keys (CMKs) managed in AWS KMS (Manual)
- cyberstrikeus Skill Cis Eks V180 5 4 1
Restrict Access to the Control Plane Endpoint (Automated)
- cyberstrikeus Skill Cis Eks V180 5 4 2
Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled (Automated)
- cyberstrikeus Skill Cis Eks V180 5 4 3
Ensure clusters are created with Private Nodes (Automated)
- cyberstrikeus Skill Cis Eks V180 5 4 5
Encrypt traffic to HTTPS load balancers with TLS certificates (Manual)
- cyberstrikeus Skill Cis Eks V180 5 5 1
Manage Kubernetes RBAC users with AWS IAM Authenticator for Kubernetes or Upgrade to AWS CLI v1.16.156 or greater (Manual)
- cyberstrikeus Skill Cis Tomcat8 V110 9 2
Disable deploy on startup of applications (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V100 4 1 5
Ensure that Service Account Tokens are only mounted where necessary (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V100 4 6 1
Create administrative boundaries between resources using namespaces (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V120 4 1 1
Ensure that the cluster-admin role is only used where required (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V120 4 1 3
Minimize wildcard use in Roles and ClusterRoles (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 1 7
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 1 8
Avoid bindings to system:anonymous (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 1 9
Avoid non-default bindings to system:unauthenticated (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 2 1
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 3 1
Ensure that all Namespaces have Network Policies defined (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 4 1
Consider external secret storage (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 5 1
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 6 3
Apply Security Context to Pods and Containers (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 4 6 4
The default namespace should not be used (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 5 1 1
Ensure Image Vulnerability Scanning is enabled (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 5 1 2
Minimize user access to Container Image repositories (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 5 1 3
Minimize cluster access to read-only for Container Image repositories (Manual)
- cyberstrikeus Skill Cis Gke Autopilot V130 5 1 4
Ensure only trusted container images are used (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 5 2 1
Ensure GKE clusters are not running using the Compute Engine default service account (Automated)
- cyberstrikeus Skill Cis Gke Autopilot V130 5 3 1
Ensure Kubernetes Secrets are encrypted using keys managed in Cloud KMS (Automated)
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cis-eks-v180-4.3.1, cis-eks-v180-4.4.1, cis-eks-v180-4.4.2. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.