DevOps & Infra

DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.

cyberstrikeus Skill

T1537 Transfer Data To Cloud Account

Adversaries may exfiltrate data by transferring the data, including through sharing/syncing and creating backups of cloud environments, to another cloud account they control on the same service.

Audited Sep 17
cyberstrikeus Skill

Ac 4 28 Linear Filter Pipelines

When transferring information between different security domains, implement a linear content filter pipeline that is enforced with discretionary and m

Audited Sep 17
cyberstrikeus Skill

T1098 001 Additional Cloud Credentials

Adversaries may add adversary-controlled credentials to a cloud account to maintain persistent access to victim accounts and instances within the environment.

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 1 6

Ensure that Service Account Tokens are only mounted where necessary (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 2 1

Minimize the admission of privileged containers (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 2 2

Minimize the admission of containers wishing to share the host process ID namespace (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 2 3

Minimize the admission of containers wishing to share the host IPC namespace (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 2 4

Minimize the admission of containers wishing to share the host network namespace (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 2 5

Minimize the admission of containers with allowPrivilegeEscalation (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 3 1

Ensure latest CNI version is used (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 3 2

Ensure that all Namespaces have Network Policies defined (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 4 1

Prefer using secrets as files over secrets as environment variables (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 4 2

Consider external secret storage (Manual)

Sep 17
cyberstrikeus Skill

Cis Oke V150 4 5 1

Create administrative boundaries between resources using namespaces (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 5 2

Apply Security Context to Your Pods and Containers (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 4 5 3

The default namespace should not be used (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 1 1

Ensure Image Vulnerability Scanning using Oracle Vulnerability Scanning Service (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 1 2

Minimize user access to Oracle Cloud Infrastructure Container Registry (OCIR) (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 1 3

Minimize cluster access to read-only for Oracle Cloud Infrastructure Container Registry (OCIR) (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 1 4

Minimize Container Registries to only those approved (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 2 1

Prefer using dedicated OCI tenancies to manage OKE clusters (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 3 1

Ensure Kubernetes Secrets are encrypted (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 4 1

Restrict Access to the Control Plane Endpoint (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 4 2

Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 4 3

Ensure clusters are created with Private Nodes (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 4 4

Ensure Network Policy is Enabled and set as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 4 5

Encrypt traffic to HTTPS load balancers with TLS certificates (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V150 5 5 1

Manage Kubernetes RBAC users with Oracle Cloud Infrastructure Identity and Access Management (IAM) (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 2 1 1

Client certificate authentication should not be used for users (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 2 2 1

Ensure access to OCI Audit service Log for OKE (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 3 1 1

Ensure that the kubelet-config.json file permissions are set to 644 or more restrictive (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 3 1 2

Ensure that the kubelet-config.json file ownership is set to root:root (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 3 1 3

Ensure that the kubelet configuration file has permissions set to 644 or more restrictive (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 3 1 4

Ensure that the kubelet configuration file ownership is set to root:root (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 3 2 1

Ensure that the --anonymous-auth argument is set to false (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis Oke V170 3 2 2

Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)

Audited Sep 17

Frequently asked questions

What are DevOps & Infra agent skills?

Which DevOps & Infra skills are most installed?

Popular DevOps & Infra skills on SkillMD right now include T1537_transfer-data-to-cloud-account, AC-4(28)_linear-filter-pipelines, T1098.001_additional-cloud-credentials. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do DevOps & Infra skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.