KevinZai ccc-devops
Load ONE skill. Get the entire DevOps domain. Built from 15 proven skills + 5 new ones.
Absorbed Skills Manifest
| # | Original Skill | What It Does | Status |
|---|---|---|---|
| 1 | docker-development |
Docker optimization — Dockerfile multi-stage builds, compose orchestration, layer caching | Absorbed |
| 2 | senior-devops |
Full DevOps toolkit — pipeline generation, Terraform scaffolding, deployment management | Absorbed |
| 3 | github-actions-security |
GitHub Actions security — secrets management, OIDC, permissions hardening, supply chain defense | Absorbed |
| 4 | github-actions-reusable-workflows |
Reusable workflows — composite actions, workflow_call, organization-wide CI templates | Absorbed |
| 5 | aws-solution-architect |
AWS architecture — Well-Architected Framework, service selection, cost optimization | Absorbed |
| 6 | aws-lambda-best-practices |
Lambda patterns — cold starts, layers, VPC config, concurrency, event source mappings | Absorbed |
| 7 | aws-s3-patterns |
S3 patterns — bucket policies, lifecycle rules, replication, presigned URLs, event notifications | Absorbed |
| 8 | aws-cloudfront-optimization |
CloudFront — cache behaviors, origin shields, Lambda@Edge, invalidation strategies | Absorbed |
| 9 | aws-iam-security |
IAM security — least-privilege policies, role assumption, permission boundaries, SCPs | Absorbed |
| 10 | container-security |
Container security — image hardening, vulnerability scanning, runtime policies, secrets management | Absorbed |
| 11 | prometheus-configuration |
Prometheus — scrape configs, recording rules, metric collection, service discovery | Absorbed |
| 12 | grafana-dashboards |
Grafana — dashboard JSON, panel queries, variables, alerting, provisioning | Absorbed |
| 13 | promql-alerting |
PromQL — alert rules, expression evaluation, recording rules, silencing strategies | Absorbed |
| 14 | infra-runbook |
Runbooks — incident response procedures, escalation paths, recovery playbooks | Absorbed |
| 15 | network-engineer |
Networking — cloud networking, VPCs, service mesh, DNS, load balancing, zero-trust | Absorbed |
| 16 | devops-router |
Routes your DevOps task to the right specialist | NEW |
| 17 | zero-downtime-deploy |
Zero-downtime deployments — blue-green, canary, rolling updates, automated rollback | NEW |
| 18 | cicd-pipeline-generator |
CI/CD pipeline generation — GitHub Actions, GitLab CI, caching, parallel execution | NEW |
| 19 | performance-monitoring |
Full-stack monitoring — APM, RUM, Core Web Vitals, profiling, error tracking | NEW |
| 20 | terraform-patterns |
Terraform mastery — modules, remote state, workspaces, drift detection, cost estimation | NEW |
Replaces loading: docker-development, senior-devops, github-actions-security, github-actions-reusable-workflows, aws-solution-architect, aws-lambda-best-practices, aws-s3-patterns, aws-cloudfront-optimization, aws-iam-security, container-security, prometheus-configuration, grafana-dashboards, promql-alerting, infra-runbook, network-engineer
How To Use
Step 1: Tell me what you need. I'll route to the right specialist.
Step 2: If this involves infrastructure, I'll confirm your cloud provider, toolchain, and constraints before proceeding.
Step 3: The specialist skill handles the work. You get senior DevOps expertise without loading 15 separate skills.
Routing Matrix
| Your Intent | Route To | Don't Confuse With |
|---|---|---|
| "Deploy with zero downtime" / "Blue-green deploy" | senior-devops + zero-downtime-deploy |
cicd-pipeline-generator (build pipeline, not deploy strategy) |
| "Set up CI/CD" / "GitHub Actions pipeline" | github-actions-security + cicd-pipeline-generator |
github-actions-reusable-workflows (reusable templates, not full pipeline) |
| "Reusable workflow" / "Composite action" | github-actions-reusable-workflows |
cicd-pipeline-generator (project-specific pipeline) |
| "Containerize" / "Dockerfile" / "Docker Compose" | docker-development + container-security |
zero-downtime-deploy (deployment, not containerization) |
| "Container security" / "Image scanning" | container-security |
docker-development (building, not securing) |
| "AWS architecture" / "Which AWS services?" | aws-solution-architect |
Individual AWS skills (service-specific) |
| "Lambda function" / "Serverless" | aws-lambda-best-practices |
aws-solution-architect (broader architecture) |
| "S3 bucket" / "Object storage" | aws-s3-patterns |
aws-cloudfront-optimization (CDN, not storage) |
| "CDN" / "CloudFront" / "Edge caching" | aws-cloudfront-optimization |
aws-s3-patterns (origin, not edge) |
| "IAM" / "Permissions" / "Roles" | aws-iam-security |
github-actions-security (CI secrets, not IAM) |
| "Prometheus" / "Metrics collection" | prometheus-configuration + performance-monitoring |
grafana-dashboards (visualization, not collection) |
| "Grafana dashboard" / "Visualize metrics" | grafana-dashboards |
prometheus-configuration (data source, not visualization) |
| "Alerting" / "PromQL alerts" | promql-alerting |
performance-monitoring (broader monitoring) |
| "APM" / "Core Web Vitals" / "RUM" | performance-monitoring |
prometheus-configuration (infrastructure metrics, not app performance) |
| "Incident response" / "Runbook" | infra-runbook |
promql-alerting (alerting, not response) |
| "Terraform" / "Infrastructure as Code" | terraform-patterns + senior-devops |
aws-solution-architect (architecture, not IaC) |
| "Networking" / "VPC" / "DNS" / "Service mesh" | network-engineer |
aws-solution-architect (broader scope) |
| "Security audit" / "Harden infrastructure" | container-security + aws-iam-security + github-actions-security |
infra-runbook (response, not prevention) |
Campaign Templates
CI/CD Pipeline Setup
cicd-pipeline-generator→ scaffold the pipeline (lint, test, build, deploy stages)github-actions-security→ harden secrets, pin action versions, configure OIDCgithub-actions-reusable-workflows→ extract reusable components for the orgdocker-development→ optimize container builds with layer cachingcontainer-security→ scan images in CI, enforce non-root- Deliver: working pipeline with security gates and fast builds
Production Deployment
zero-downtime-deploy→ choose strategy (blue-green, canary, rolling)senior-devops→ orchestrate deployment with rollback supportdocker-development→ production Dockerfile optimizationaws-solution-architect→ validate infrastructure designperformance-monitoring→ set up APM and health checksinfra-runbook→ write rollback and incident procedures- Deliver: production-ready deployment with monitoring and runbooks
Monitoring Stack
prometheus-configuration→ configure scrape targets and recording rulesgrafana-dashboards→ build dashboards for infrastructure and application metricspromql-alerting→ define alert rules with severity levels and routingperformance-monitoring→ add APM, RUM, and Core Web Vitals trackinginfra-runbook→ document alert response procedures- Deliver: complete observability stack from metrics collection to incident response
Security Hardening
aws-iam-security→ audit and tighten IAM policies, implement least-privilegecontainer-security→ harden images, scan vulnerabilities, enforce runtime policiesgithub-actions-security→ secure CI/CD pipeline, configure OIDC, remove long-lived credentialsnetwork-engineer→ implement zero-trust networking, segment VPCs, configure WAFinfra-runbook→ document security incident response procedures- Deliver: hardened infrastructure with defense-in-depth across all layers
AWS Infrastructure Build
aws-solution-architect→ design architecture using Well-Architected Frameworkterraform-patterns→ implement infrastructure as code with modular designaws-iam-security→ configure least-privilege accessaws-lambda-best-practices→ optimize serverless componentsaws-s3-patterns→ configure storage with lifecycle and replicationaws-cloudfront-optimization→ set up CDN with proper cache behaviorsnetwork-engineer→ configure VPCs, subnets, security groups- Deliver: production AWS environment with IaC, security, and CDN
Terraform Module Library
terraform-patterns→ design module structure with versioningaws-solution-architect→ validate architectural decisionssenior-devops→ integrate with deployment pipelinecicd-pipeline-generator→ add terraform plan/apply to CI- Deliver: reusable, versioned Terraform modules with CI integration