DevOps & Infra

DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.

cyberstrikeus Skill

Cis Docker V170 3 18

Ensure that daemon.json file permissions are set to 644 or more restrictive

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 3 19

Ensure that the /etc/default/docker file ownership is set to root:root

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 3 20

Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 3 21

Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 3 22

Ensure that the /etc/sysconfig/docker file ownership is set to root:root

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 3 23

Ensure that the Containerd socket file ownership is set to root:root

Audited Sep 17
cyberstrikeus Skill

T0851 Rootkit

Adversaries may deploy rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components.

Audited Sep 17
cyberstrikeus Skill

T1059 009 Cloud API

Adversaries may abuse cloud APIs to execute malicious commands.

Audited Sep 17
cyberstrikeus Skill

T1069 003 Cloud Groups

Adversaries may attempt to find cloud groups and permission settings.

Audited Sep 17
cyberstrikeus Skill

T1087 004 Cloud Account

Adversaries may attempt to get a listing of cloud accounts.

Audited Sep 17
cyberstrikeus Skill

T1136 003 Cloud Account

Adversaries may create a cloud account to maintain access to victim systems.

Audited Sep 17
cyberstrikeus Skill

T1648 Serverless Execution

Adversaries may abuse serverless computing, integration, and automation services to execute arbitrary code in cloud environments.

Sep 17
cyberstrikeus Skill

Cis Docker V170 3 24

Ensure that the Containerd socket file permissions are set to 660 or more restrictively

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 4 10

Ensure secrets are not stored in Dockerfiles

Sep 17
cyberstrikeus Skill

Cis Docker V170 4 11

Ensure only verified packages are installed

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 4 12

Ensure all signed artifacts are validated

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 10

Ensure that the host's network namespace is not shared

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 11

Ensure that the memory usage for containers is limited

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 12

Ensure that CPU priority is set appropriately on containers

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 13

Ensure that the container's root filesystem is mounted as read only

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 14

Ensure that incoming container traffic is bound to a specific host interface

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 15

Ensure that the 'on-failure' container restart policy is set to '5'

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 16

Ensure that the host's process namespace is not shared

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 17

Ensure that the host's IPC namespace is not shared

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 18

Ensure that host devices are not directly exposed to containers

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 19

Ensure that the default ulimit is overwritten at runtime if needed

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 20

Ensure mount propagation mode is not set to shared

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 21

Ensure that the host's UTS namespace is not shared

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 22

Ensure the default seccomp profile is not Disabled

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 23

Ensure that docker exec commands are not used with the privileged option

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 24

Ensure that docker exec commands are not used with the user=root option

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 25

Ensure that cgroup usage is confirmed

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 26

Ensure that the container is restricted from acquiring additional privileges

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 27

Ensure that container health is checked at runtime

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 28

Ensure that Docker commands always make use of the latest version of their image

Audited Sep 17
cyberstrikeus Skill

Cis Docker V170 5 29

Ensure that the PIDs cgroup limit is used

Audited Sep 17

Frequently asked questions

What are DevOps & Infra agent skills?

Which DevOps & Infra skills are most installed?

Popular DevOps & Infra skills on SkillMD right now include cis-docker-v170-3.18, cis-docker-v170-3.19, cis-docker-v170-3.20. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do DevOps & Infra skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.