DevOps & Infra
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
-
cyberstrikeus Skill Cis Docker 3 20Ensure that the /etc/default/docker file permissions are set to 644 or more restrictively
Audited - cyberstrikeus Skill Cis Docker 3 21
Ensure that the /etc/sysconfig/docker file permissions are set to 644 or more restrictively
Audited - cyberstrikeus Skill Cis Docker 3 22
Ensure that the /etc/sysconfig/docker file ownership is set to root:root
Audited - cyberstrikeus Skill Cis Docker 3 23
Ensure that the Containerd socket file ownership is set to root:root
Audited - cyberstrikeus Skill Cis Docker 3 24
Ensure that the Containerd socket file permissions are set to 660 or more restrictively
Audited - cyberstrikeus Skill Cis Docker 4 10
Ensure secrets are not stored in Dockerfiles
- cyberstrikeus Skill Cis Docker 4 11
Ensure only verified packages are installed
Audited - cyberstrikeus Skill Cis Docker 4 12
Ensure all signed artifacts are validated
Audited - cyberstrikeus Skill Cis Docker 5 10
Ensure that the host's network namespace is not shared
Audited - cyberstrikeus Skill Cis Docker 5 11
Ensure that the memory usage for containers is limited
Audited - cyberstrikeus Skill Cis Docker 5 12
Ensure that CPU priority is set appropriately on containers
Audited - cyberstrikeus Skill Cis Docker 5 13
Ensure that the container's root filesystem is mounted as read only
Audited - cyberstrikeus Skill Cis Docker 5 14
Ensure that incoming container traffic is bound to a specific host interface
Audited - cyberstrikeus Skill Cis Docker 5 15
Ensure that the 'on-failure' container restart policy is set to '5'
Audited - cyberstrikeus Skill Cis Docker 5 16
Ensure that the host's process namespace is not shared
Audited - cyberstrikeus Skill Cis Docker 5 17
Ensure that the host's IPC namespace is not shared
Audited - cyberstrikeus Skill Cis Docker 5 18
Ensure that host devices are not directly exposed to containers
- cyberstrikeus Skill Cis Docker 5 19
Ensure that the default ulimit is overwritten at runtime if needed
Audited - cyberstrikeus Skill Cis Docker 5 20
Ensure mount propagation mode is not set to shared
Audited - cyberstrikeus Skill Cis Docker 5 21
Ensure that the host's UTS namespace is not shared
Audited - cyberstrikeus Skill Cis Docker 5 22
Ensure the default seccomp profile is not Disabled
Audited - cyberstrikeus Skill Cis Docker 5 23
Ensure that docker exec commands are not used with the privileged option
Audited - cyberstrikeus Skill Cis Docker 5 24
Ensure that docker exec commands are not used with the user=root option
Audited - cyberstrikeus Skill Cis Docker 5 25
Ensure that cgroup usage is confirmed
Audited - cyberstrikeus Skill Cis Docker 5 26
Ensure that the container is restricted from acquiring additional privileges
Audited - cyberstrikeus Skill Cis Docker 5 27
Ensure that container health is checked at runtime
Audited - cyberstrikeus Skill Cis Docker 5 28
Ensure that Docker commands always make use of the latest version of their image
Audited - cyberstrikeus Skill Cis Docker 5 29
Ensure that the PIDs cgroup limit is used
Audited - cyberstrikeus Skill Cis Docker 5 30
Ensure that Docker's default bridge docker0 is not used
Audited - cyberstrikeus Skill Cis Docker 5 31
Ensure that the host's user namespaces are not shared
Audited - cyberstrikeus Skill Cis Docker 5 32
Ensure that the Docker socket is not mounted inside any containers
Audited - cyberstrikeus Skill Cis Docker 1 1 1
Ensure a separate partition for containers has been created
Audited - cyberstrikeus Skill Cis Docker 1 1 2
Ensure only trusted users are allowed to control Docker daemon
Audited - cyberstrikeus Skill Cis Docker 1 1 3
Ensure auditing is configured for the Docker daemon
Audited - cyberstrikeus Skill Cis Docker 1 1 4
Ensure auditing is configured for Docker files and directories - /run/containerd
Audited - cyberstrikeus Skill Cis Docker 1 1 5
Ensure auditing is configured for Docker files and directories - /var/lib/docker
Audited
Frequently asked questions
What are DevOps & Infra agent skills?
DevOps agent skills automate the delivery side of software: CI/CD pipelines, Dockerfiles, infrastructure as code, releases, and incident checklists. A skill gives your AI agent the exact runbook to follow, so deployments and configs come out consistent every time.
Which DevOps & Infra skills are most installed?
Popular DevOps & Infra skills on SkillMD right now include cis-docker-3.20, cis-docker-3.21, cis-docker-3.22. Rankings shift as installs change; sort this page by "Most installs" for the live list.
Do DevOps & Infra skills work with Claude Code and Cursor?
Yes. Every skill here ships as a SKILL.md file, an open format that works in Claude Code, Claude.ai, Cursor, Codex, Windsurf, and 60+ other agents. Install one with npx skillmds@latest add <owner>/<name>, or copy the file into your agent's skills directory.