DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
cyberstrikeus Skill Cis Docker 5 5Ensure that privileged containers are not used
Audited - cyberstrikeus Skill Cis Docker 5 6
Ensure sensitive host system directories are not mounted on containers
Audited - cyberstrikeus Skill Cis Docker 5 7
Ensure sshd is not run within containers
Audited - cyberstrikeus Skill Cis Docker 5 8
Ensure privileged ports are not mapped within containers
Audited - cyberstrikeus Skill Cis Docker 5 9
Ensure that only needed ports are open on the container
Audited - cyberstrikeus Skill Cis Docker 6 1
Ensure that image sprawl is avoided
Audited - cyberstrikeus Skill Cis Docker 6 2
Ensure that container sprawl is avoided
Audited - cyberstrikeus Skill Cis Docker 7 1
Ensure that the minimum number of manager nodes have been created in a swarm
Audited - cyberstrikeus Skill Cis Docker 7 2
Ensure that swarm services are bound to a specific host interface
Audited - cyberstrikeus Skill Cis Docker 7 3
Ensure that all Docker swarm overlay networks are encrypted
Audited - cyberstrikeus Skill Cis Docker 7 4
Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster
- cyberstrikeus Skill Cis Docker 7 5
Ensure that swarm manager is run in auto-lock mode
Audited - cyberstrikeus Skill Cis Docker 7 6
Ensure that the swarm manager auto-lock key is rotated periodically
Audited - cyberstrikeus Skill Cis Docker 7 7
Ensure that node certificates are rotated as appropriate
Audited - cyberstrikeus Skill Cis Docker 7 8
Ensure that CA certificates are rotated as appropriate
Audited - cyberstrikeus Skill Cis Docker 7 9
Ensure that management plane traffic is separated from data plane traffic
Audited - cyberstrikeus Skill Cis Docker 2 10
Enable user namespace support
Audited - cyberstrikeus Skill Cis Docker 2 11
Ensure the default cgroup usage has been confirmed
Audited - cyberstrikeus Skill Cis Docker 2 12
Ensure base device size is not changed until needed
Audited - cyberstrikeus Skill Cis Docker 2 13
Ensure that authorization for Docker client commands is enabled
Audited - cyberstrikeus Skill Cis Docker 2 14
Ensure centralized and remote logging is configured
Audited - cyberstrikeus Skill Cis Docker 2 15
Ensure containers are restricted from acquiring new privileges
Audited - cyberstrikeus Skill Cis Docker 2 16
Ensure live restore is enabled
Audited - cyberstrikeus Skill Cis Docker 2 17
Ensure Userland Proxy is Disabled
Audited - cyberstrikeus Skill Cis Docker 2 18
Ensure that a daemon-wide custom seccomp profile is applied if appropriate
Audited - cyberstrikeus Skill Cis Docker 2 19
Ensure that experimental features are not implemented in production
Audited - cyberstrikeus Skill Cis Docker 3 10
Ensure that TLS CA certificate file permissions are set to 444 or more restrictively
Audited - cyberstrikeus Skill Cis Docker 3 11
Ensure that Docker server certificate file ownership is set to root:root
Audited - cyberstrikeus Skill Cis Docker 3 12
Ensure that the Docker server certificate file permissions are set to 444 or more restrictively
Audited - cyberstrikeus Skill Cis Docker 3 13
Ensure that the Docker server certificate key file ownership is set to root:root
Audited - cyberstrikeus Skill Cis Docker 3 14
Ensure that the Docker server certificate key file permissions are set to 400
Audited - cyberstrikeus Skill Cis Docker 3 15
Ensure that the Docker socket file ownership is set to root:docker
Audited - cyberstrikeus Skill Cis Docker 3 16
Ensure that the Docker socket file permissions are set to 660 or more restrictively
Audited - cyberstrikeus Skill Cis Docker 3 17
Ensure that the daemon.json file ownership is set to root:root
Audited - cyberstrikeus Skill Cis Docker 3 18
Ensure that daemon.json file permissions are set to 644 or more restrictive
Audited - cyberstrikeus Skill Cis Docker 3 19
Ensure that the /etc/default/docker file ownership is set to root:root
Audited
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cis-docker-5.5, cis-docker-5.6, cis-docker-5.7. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.