DevOps & Infra

DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.

cyberstrikeus Skill

T1552 005 Cloud Instance Metadata API

Adversaries may attempt to access the Cloud Instance Metadata API to collect credentials and other sensitive data.

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 1 18

Ensure that the controller-manager.conf file ownership is set to root:root (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 1 19

Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 1 20

Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 1 21

Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 10

Ensure that the admission control plugin AlwaysAdmit is not set (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 11

Ensure that the admission control plugin AlwaysPullImages is set (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 12

Ensure that the admission control plugin ServiceAccount is set (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 13

Ensure that the admission control plugin NamespaceLifecycle is set (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 14

Ensure that the admission control plugin NodeRestriction is set (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 15

Ensure that the --profiling argument is set to false (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 16

Ensure that the --audit-log-path argument is set (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 17

Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 18

Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 19

Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 20

Ensure that the --request-timeout argument is set as appropriate (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 21

Ensure that the --service-account-lookup argument is set to true (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 22

Ensure that the --service-account-key-file argument is set as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 23

Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 24

Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 25

Ensure that the --client-ca-file argument is set as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 26

Ensure that the --etcd-cafile argument is set as appropriate (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 27

Ensure that the --encryption-provider-config argument is set as appropriate (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 28

Ensure that encryption providers are appropriately configured (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 29

Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 1 2 30

Ensure that the --service-account-extend-token-expiration parameter is set to false (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 4 2 10

Ensure that the --rotate-certificates argument is not set to false (Automated)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 4 2 12

Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 4 2 13

Ensure that a limit is set on pod PIDs (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 4 2 14

Ensure that the --seccomp-default parameter is set to true (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 4 2 15

Ensure that the --IPAddressDeny is set to any (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 5 1 10

Minimize access to the proxy sub-resource of nodes (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 5 1 11

Minimize access to the approval sub-resource of certificatesigningrequests objects (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 5 1 12

Minimize access to webhook configuration objects (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 5 1 13

Minimize access to the service account token creation (Manual)

Audited Sep 17
cyberstrikeus Skill

Cis K8S V1111 5 2 10

Minimize the admission of containers with capabilities assigned (Manual)

Audited Sep 17

Frequently asked questions

What are DevOps & Infra agent skills?

Which DevOps & Infra skills are most installed?

Popular DevOps & Infra skills on SkillMD right now include T1552.005_cloud-instance-metadata-api, cis-k8s-v1111-1.1.18, cis-k8s-v1111-1.1.19. Rankings shift as installs change; sort this page by "Most installs" for the live list.

Do DevOps & Infra skills work with Claude Code and Cursor?

Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.