Devops AI agent skills

4,131 skills in the archive. Read a skill’s instructions or open its original repository.

• Pm Teaching Mode

  by @bobmatnyc

  Comprehensive teaching templates and progressive disclosure patterns for PM teacher mode

• Mpm Session Management

  by @bobmatnyc

  PM session management framework for context limits and session resume

• Mpm

  by @bobmatnyc

  Access Claude MPM functionality and manage multi-agent orchestration

• Mpm Doctor

  by @bobmatnyc

  Run diagnostic checks on Claude MPM installation

• Mpm Monitor

  by @bobmatnyc

  Control monitoring server and dashboard

• Pm Delegation Patterns

  by @bobmatnyc

  Common delegation patterns for PM agent

• Mpm Config

  by @bobmatnyc

  Manage Claude MPM configuration

• Taste Brutalist

  by @hanamizuki

  Raw mechanical interfaces fusing Swiss typographic print with military terminal aesthetics. Rigid grids, extreme type scale contrast, utilitarian color, analog degradation effects. For data-heavy dashboards, portfolios, or…

• Gplay Migrate Fastlane

  by @hanamizuki

  Migration from Fastlane supply to gplay CLI using the gplay migrate fastlane command. Use when asked to convert a Fastlane-based Play Store workflow to gplay, or to import existing Fastlane metadata directories.

• Gplay Gradle Build

  by @hanamizuki

  Build, sign, and package Android apps with Gradle before uploading to Google Play. Use when asked to create an APK or AAB, configure signing, or set up build pipelines.

• Tech Stack Evaluator

  by @yezannnnn

  Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing…

• Managing Workflow Secrets

  by @bitwarden

  Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions composite actions (azure-login →…

• Aws Solution Architect

  by @yezannnnn

  Design AWS architectures for startups using serverless patterns and IaC templates. Use when asked to design serverless architecture, create CloudFormation templates, optimize AWS costs, set up CI/CD pipelines, or migrate to AWS.…

• Senior Data Scientist

  by @yezannnnn

  World-class data science skill for statistical modeling, experimentation, causal inference, and advanced analytics. Expertise in Python (NumPy, Pandas, Scikit-learn), R, SQL, statistical methods, A/B testing, time series, and…

• Senior Architect

  by @yezannnnn

  This skill should be used when the user asks to "design system architecture", "evaluate microservices vs monolith", "create architecture diagrams", "analyze dependencies", "choose a database", "plan for scalability", "make…

• Senior Secops

  by @yezannnnn

  Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices. Includes security scanning, vulnerability assessment, compliance checking, and security automation. Use…

• Senior Devops

  by @yezannnnn

  Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup, infrastructure as code, deployment automation, and monitoring. Use when setting…

• Senior Ml Engineer

  by @yezannnnn

  ML engineering skill for productionizing models, building MLOps pipelines, and integrating LLMs. Covers model deployment, feature stores, drift monitoring, RAG systems, and cost optimization.

• Auditing Workflow Conventions

  by @bitwarden

  Reference for Bitwarden GitHub Actions naming conventions that the workflow linter (bwwl) does not enforce. Covers three standards — job IDs (kebab-case), step names (Sentence case imperative), and workflow file names…

• Action Remediate

  by @bitwarden

  Remediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — `@main` ref for internal `bitwarden/` actions, full SHA with inline version comment for external…

• Action Audit

  by @bitwarden

  Audit GitHub Actions action usage across an org. Searches for a specific action (incident mode) or sweeps all workflow files for non-compliant action references (audit mode). Produces a read-only report of findings with…

• Detecting Secrets

  by @bitwarden

  This skill should be used when the user asks to "find hardcoded secrets", "audit for credential leaks", "check for API keys in code", "review secret scanning alerts", "rotate a leaked secret", or needs to detect hardcoded…

• Running An Architectural Assessment

  by @bitwarden

  Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.

• Maplibre Source Wiring

  by @maplibre

  Getting a MapLibre GL JS source to actually render — TileJSON `url` versus hand-wired `tiles` templates, matching `source-layer` names to the tile schema, layer order and inserting below labels, `promoteId` and the feature ids…

• Maplibre Terrain Rendering

  by @maplibre

  Drawing elevation in MapLibre GL JS once a raster-dem source works — hillshade and `hillshade-method`, the `color-relief` layer and the `["elevation"]` expression, runtime contours with `maplibre-contour`, and 3D terrain with…

• Maplibre Pmtiles Patterns

  by @maplibre

  Serverless vector and raster tiles with PMTiles for MapLibre GL JS — single-file format, HTTP range requests, hosting on S3/R2/GitHub Pages, generating with Planetiler or tippecanoe, and the pmtiles protocol. Use when you need…

• Incident Postmortem

  by @proflead

  Draft an incident postmortem with timeline, RCA, and action items. Use when a senior developer needs a structured post-incident report.

• Iac Reviewer

  by @proflead

  Review infrastructure-as-code changes for safety and correctness. Use when a mid-level developer needs a second look on IaC.

• Zero Downtime Migration

  by @proflead

  Plan a zero-downtime migration for data or infrastructure. Use when a senior developer needs a safe migration strategy.

• Observability Setup

  by @proflead

  Set up metrics, logs, and traces for a service. Use when a mid-level developer needs basic observability coverage.

• Log Summarizer

  by @proflead

  Summarize noisy logs into likely causes and next steps. Use when a junior developer needs help interpreting logs.

• Performance Budgeting

  by @proflead

  Define performance budgets and guardrails. Use when a senior developer needs performance targets and enforcement.

• Api Error Taxonomy

  by @proflead

  Define consistent API error codes and responses. Use when a mid-level developer needs error standardization.

• Feature Flag Playbook

  by @proflead

  Plan feature flag rollout and cleanup. Use when a mid-level developer needs controlled release guidance.

• Aegisops Ai

  by @diegosouzapw

  /aegisops-ai — Autonomous Governance Orchestrator workflow skill. Use this skill when the user needs Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and…

• Aegisops Ai V2

  by @diegosouzapw

  /aegisops-ai — Autonomous Governance Orchestrator workflow skill. Use this skill when the user needs Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and…

• Letta Configuration

  by @letta-ai

  Configure LLM models and providers for Letta agents and servers. Use when setting model handles, adjusting temperature/tokens, configuring provider-specific settings, setting up BYOK providers, or configuring self-hosted…

• Self Configuration

  by @letta-ai

  Configures Letta agents' own runtime behavior, including model, context window, system prompt, reasoning, conversation overrides, compaction settings, and compaction prompts. Use when an agent or user asks to self-modify, tune…

• Datadog

  by @letta-ai

  Query Datadog observability data (logs, metrics, monitors, dashboards, hosts) via direct API. Use when investigating production issues, checking monitors, searching logs, or accessing Datadog data.

• Producing Threat Intelligence

  by @trilwu

  Produce cyber threat intelligence by pivoting on indicators to find related infrastructure, tracking actors and campaigns, enriching and contextualizing IOCs, applying attribution discipline and analytic confidence, and…

• Investigating Azure Incidents

  by @trilwu

  Investigate security incidents in Microsoft Azure (resource and subscription control plane) -- reconstruct attacker activity from the Azure Activity Log and resource/data-plane diagnostic logs, anchor the investigation on the…

• Analyzing Network Traffic

  by @trilwu

  Analyze packet captures and network telemetry for intrusion evidence — capture and handling, the Wireshark/tshark triage funnel, Zeek log mining, Suricata rule runs, beacon and DNS-tunnel detection, TLS/JA3 fingerprinting, HTTP…

• Investigating Aws Incidents

  by @trilwu

  Investigate security incidents in Amazon Web Services -- reconstruct attacker activity from CloudTrail, VPC Flow Logs, and GuardDuty, anchor the investigation on the compromised principal (access key or role), trace privilege…

• Hardening Cloud Posture

  by @trilwu

  Proactively harden a cloud account or organization before an incident — prioritizing IAM and identity risk over checkbox findings, closing the exposures that become attack paths (public storage, over-broad roles, missing audit…

• Hunting Web Backdoors

  by @trilwu

  Hunt planted webshells and backdoors across a web source tree — PHP first (also JSP, ASP, Node) — triaging a directory at scale, statically decoding obfuscation layers without ever executing the payload, finding…

• Investigating Gcp Incidents

  by @trilwu

  Investigate a security incident in Google Cloud — establishing what audit logging exists before trusting a gap, reconstructing activity from Cloud Audit Logs, triaging service-account and OAuth abuse, following Security Command…

• Defending Kubernetes

  by @trilwu

  Harden and monitor a Kubernetes cluster against the attacks that actually happen — RBAC least privilege and escalation paths, Pod Security Admission enforcement, network policy default-deny, secrets and service-account token…

• Analyzing Disk Images

  by @trilwu

  Perform dead-disk forensics on an acquired disk image using The Sleuth Kit, Plaso, and bulk_extractor — verify integrity and mount read-only, map partitions, recover deleted files, build a file-system and super-timeline, carve…

• Analyzing Linux Persistence

  by @trilwu

  Systematically identify and analyze persistence mechanisms on Linux systems during DFIR investigations -- sweep systemd units, cron jobs, shell initialization, SSH config, kernel modules, LD_PRELOAD, package manager hooks, udev…

• Attacking Eks Gke Aks

  by @trilwu

  Assess managed Kubernetes clusters on EKS, GKE, and AKS by exploiting the seams between cloud IAM and Kubernetes RBAC -- IRSA/OIDC trust abuse, Workload Identity Federation, pod-to-IMDS escalation, aws-auth ConfigMap takeover,…

• Attacking Entra Id

  by @trilwu

  Attack and enumerate Azure AD / Entra ID tenants — initial recon with AADInternals and ROADtools, password spraying, token theft (PRT, CAE, refresh tokens), application and service principal abuse, Conditional Access bypass,…

• Abusing Ci Cd Oidc

  by @trilwu

  Exploit CI/CD pipeline misconfigurations and OIDC federation weaknesses across GitHub Actions, GitLab CI, and Jenkins -- poisoned workflows, secret exfiltration, runner compromise, overly broad OIDC trust policies, build…

• Investigating M365 Entra

  by @trilwu

  Investigate security incidents in Microsoft 365 and Entra ID (Azure AD) -- search the Unified Audit Log, correlate sign-in and audit events, trace illicit OAuth consent grants, analyze mailbox rule manipulation, and contain…

• Writing Sigma Rules

  by @trilwu

  Author and maintain Sigma detection rules — structure, logsource taxonomy, detection logic with modifiers, false-positive filtering, backend conversion with pySigma, and offline validation with Hayabusa or Chainsaw. Use when…

• Auditing Supply Chain

  by @trilwu

  Audit software supply chain risk — dependency and transitive package review, typosquatting and dependency confusion, lockfile and SBOM analysis, CI/CD pipeline and GitHub Actions security, build provenance, and secrets exposure.…

• Hunting Threats

  by @trilwu

  Run hypothesis-driven threat hunts across endpoint, network, cloud, and identity telemetry using stack counting, outlier analysis, and ATT&CK-based hypotheses, with SIEM query patterns for Splunk, KQL, and Elastic. Use when…

• Responding To Incidents

  by @trilwu

  Run digital forensics and incident response — triage, evidence acquisition with chain of custody, host and cloud artifact analysis, timeline reconstruction, scoping, containment, eradication, and postmortem. Use during a…

• Engineering Detections

  by @trilwu

  Build, test, and tune detection content — Sigma, YARA, Suricata, and EDR/SIEM queries — mapped to MITRE ATT&CK with explicit false-positive analysis and detection-as-code practices. Use when writing or reviewing a detection…

• Reviewing Code Changes

  by @trilwu

  Perform a security review of a diff, branch, or pull request — assessing what the change introduces, weakens, or exposes, with a triage-first workflow and false-positive discipline. Use when asked to security review a PR or…

• Analyzing Malware

  by @trilwu

  Analyze suspected malware safely — containment, static triage, sandboxed detonation, unpacking, capability and C2 extraction, IOC production, and YARA rule authoring. Use when handed a suspicious file, hash, or sample, when…

• App Spec Packager

  by @instructa

  Use this skill when the user wants to turn an application, product, startup idea, SaaS, mobile app, web app, API, AI product, or internal tool into a production-ready Markdown specification package for coding agents. Creates…

• Claude Code Templates

  by @happycapy-ai

  CLI tool for configuring and monitoring Claude Code with a comprehensive collection of 600+ AI agents, 200+ custom commands, 55+ external service integrations (MCPs), 60+ settings, 39+ hooks, and 14+ project templates. Use when…

• Factory

  by @popmechanic

  Self-contained SaaS pipeline — invoke directly, do not decompose. Generates a factory app with landing page, Stripe subscription checkout, Vibe Token economics, and deploys to Cloudflare Workers. Use when the user wants to…

• Test

  by @popmechanic

  Self-contained test automation — invoke directly, do not decompose. End-to-end integration test that assembles a fixture, deploys to Cloudflare (with auto-provisioned Connect), and presents a live URL for browser verification.…

• Cloudflare

  by @popmechanic

  Self-contained deploy automation — invoke directly, do not decompose. Deploys a Vibes app to Cloudflare Workers via the Deploy API. Use when deploying, publishing, going live, pushing to production, or hosting on the edge.

• Helius Dflow

  by @sendaifun

  Build Solana trading applications combining DFlow trading APIs with Helius infrastructure. Covers spot swaps (imperative and declarative), prediction markets, real-time market streaming, Proof KYC, transaction submission via…

• Helius

  by @sendaifun

  Build Solana applications with Helius infrastructure. Covers transaction sending (Sender), asset/NFT queries (DAS API), real-time streaming (WebSockets, Laserstream), event pipelines (webhooks), priority fees, wallet analysis,…

• Surfpool

  by @sendaifun

  Complete Surfpool development environment for Solana - drop-in replacement for solana-test-validator with mainnet forking, cheatcodes, Infrastructure as Code, and Surfpool Studio. The fastest way to develop and test Solana…

• Pinocchio Development

  by @sendaifun

  Comprehensive guide for building high-performance Solana programs using Pinocchio - the zero-dependency, zero-copy framework. Covers account validation, CPI patterns, optimization techniques, and migration from Anchor.

• Debridge

  by @sendaifun

  Complete deBridge Protocol SDK for building cross-chain bridges, message passing, and token transfers on Solana. Use when building cross-chain applications, bridging assets between Solana and EVM chains, or implementing…

• Zz Code Recon

  by @sendaifun

  Deep architectural context building for security audits. Use when conducting security reviews, building codebase understanding, mapping trust boundaries, or preparing for vulnerability analysis. Inspired by Trail of Bits…

• Sanctum

  by @sendaifun

  Complete Sanctum SDK for liquid staking, LST swaps, and Infinity pool operations on Solana. Use when working with LSTs (mSOL, jitoSOL, bSOL, INF), staking SOL, swapping between liquid staking tokens, or integrating Sanctum's…

• Solana Agent Kit

  by @sendaifun

  Comprehensive guide for building AI agents that interact with Solana blockchain using SendAI's Solana Agent Kit. Covers 60+ actions, LangChain/Vercel AI integration, MCP server setup, and autonomous agent patterns.

• Managing Pipelines

  by @rileyhilliard

  Guides GitHub Actions CI/CD architecture, security hardening, and deployment strategies. Use when designing workflows, securing supply chains, optimizing build performance, or configuring deployments.

• Architecting Systems

  by @rileyhilliard

  Guides clean, scalable system architecture during the build phase. Use when designing modules, defining boundaries, structuring projects, managing dependencies, or preventing tight coupling and brittleness as systems grow.

• Deep Dive Ioc

  by @dandye

  Perform exhaustive analysis of a critical IOC. Use when an IOC needs Tier 2+ investigation beyond basic enrichment - includes GTI pivoting, deep SIEM searches, correlation with related entities, and threat attribution. For…

• Hunt Apt

  by @dandye

  Hunt for a specific APT/threat actor in your environment. Use when you have a threat actor name or GTI collection ID and want to search for their TTPs and IOCs. Gathers intelligence from GTI, searches SIEM for IOCs and TTP-based…

• Hunt Threat

  by @dandye

  Conduct proactive, hypothesis-driven threat hunting. Use when performing advanced hunting based on threat intelligence, TTPs, or anomalies. For Tier 3 analysts or dedicated threat hunters. Supports iterative search, pivoting,…

• Triage Malware

  by @dandye

  Triage a suspected malicious file hash. Use when investigating malware alerts or suspicious files. Analyzes GTI file report, behavioral indicators, identifies affected hosts, enriches network IOCs, and recommends containment…

• Correlate Ioc

  by @dandye

  Check for existing SIEM alerts and case management entries related to IOCs. Use to understand if an indicator has triggered previous alerts or is part of ongoing investigations. Takes IOC list and returns related alerts and cases.

• Hunt Ioc

  by @dandye

  Hunt for specific IOCs across your environment. Use when you have a list of IPs, domains, hashes, or URLs from threat intel and want to check if they appear in your SIEM. Systematic searching with enrichment and documentation.

• Confirm Action

  by @dandye

  Ask the user to confirm before taking a significant action. Use before containment, remediation, or other impactful operations to ensure analyst approval. Presents options and waits for response.

• Generate Report

  by @dandye

  Save investigation findings to a markdown report file. Use after completing triage, enrichment, or investigation to create a permanent record. Generates timestamped files in ./reports/ directory.

• Check Duplicates

  by @dandye

  Check for duplicate or similar cases. Use before deep analysis to avoid investigating the same incident twice. Takes a CASE_ID and returns list of similar cases.

• Docs Ci

  by @jh941213

  Scaffold a docs-as-code CI/CD pipeline + docs drift detection — link check, OpenAPI lint/breaking gate, mermaid validation, docs freshness check, CHANGELOG automation, docs.yaml manifest. Use when installing docs CI/pipelines,…

• Docs Ci

  by @jh941213

  docs-as-code CI/CD 파이프라인 스캐폴딩 + 문서 드리프트 감지 — 링크 체크, OpenAPI lint/breaking 게이트, mermaid 검증, 문서 신선도 검사, CHANGELOG 자동화, docs.yaml 매니페스트. docs CI/문서 파이프라인 설치, 문서 드리프트·신선도 감지, docs sync 자동화, 링크 체크, changelog 자동화가 필요할 때. 문서 내용 작성은…

• Docs Manuals

  by @jh941213

  Generate user manuals (Diátaxis) and operator manuals (runbooks, deployment guide, configuration reference, incident playbook). Use when writing user manuals/guides/tutorials, operator manuals, runbooks, deployment guides,…

• Docs Manuals

  by @jh941213

  사용자 매뉴얼(Diátaxis)과 운영자 매뉴얼(런북, 배포 가이드, 설정 레퍼런스, 인시던트 플레이북) 생성. 사용자 매뉴얼/유저 가이드/튜토리얼, 운영자 매뉴얼, 런북(runbook), 배포 가이드, 온콜/인시던트 대응 문서가 필요할 때. API 명세는 docs-interfaces, 아키텍처 문서는 docs-architecture, docs CI 파이프라인은 docs-ci 사용

• Auto Memory

  by @jh941213

  Use when starting substantial work in a repo (implementation, fixes, deploys, debugging), when first exploring a new repo, or when finishing work that produced reusable knowledge. Operates a routing table that selectively loads…

• Stitch Loop

  by @jh941213

  Stitch를 사용하여 자율적으로 멀티 페이지 웹사이트를 생성하는 반복 빌드 루프 패턴 — 바통 시스템으로 지속적 웹사이트 개발. Triggers on: Stitch 루프, 웹사이트 생성, 멀티 페이지, 빌드 루프. NOT for: 단일 페이지, React 앱.

• Harness Diagnostics

  by @jh941213

  에이전트 하네스 12원칙 기반 자가 진단 및 개선 제안. 자동 발동 없음 — /harness-diagnostics 로 수동 실행 (인자로 setup/audit/maintenance 모드 선택). NOT for: 코드 구현, 버그 수정, 테스트 작성.

• Auto Memory

  by @jh941213

  레포에서 실질적인 작업(구현·수정·배포·디버깅)을 시작할 때, 새 레포를 처음 파악할 때, 작업을 마치고 기억할 지식이 생겼을 때 사용. 작업 유형에 맞는 docs·메모리만 선택적으로 로드하는 라우팅 테이블을 운영한다

• Dev Machine Setup

  by @luongnv89

  Set up or tune any dev machine, fresh or drifted, on macOS, Linux, or Windows: report what's missing, install only that, then fix PATH, duplicate runtimes, and shell config. Don't use for Dockerfiles, CI images, or single…

• Tad Generator

  by @luongnv89

  Generate a Technical Architecture Document (TAD) from a PRD. Use when asked to design system architecture or define how a product is built. Updates tad.md and reports GitHub links. Don't use for PRD authoring, sprint tasks, or…

• Security Setup

  by @luongnv89

  Install local-first security hardening: pre-commit secret detection, offline dependency scans, static analysis, reports, and gated free CI. Use when hardening repos or adding security hooks. Don't use for incident response or…

• Devops Pipeline

  by @luongnv89

  Configure pre-commit hooks and lean GitHub Actions for shift-left quality assurance. Use when adding or auditing CI/CD to maximize local test coverage and minimize CI cost. Skip for Terraform/K8s, deployment pipelines, or…

• Website Cloner

  by @luongnv89

  Build an improved website clone from a URL via 6-phase gated workflow (Vite/React/shadcn/Tailwind + GitHub Pages). Use for end-to-end site rebuilds. Don't use for single-phase work.

• Website Implementation Plan

  by @luongnv89

  Generate phased tasks.md from an approved website PRD, with landing page first, measurable tasks, and collect/create asset tracking. Use for implementation planning. Don't use for coding, design review, unapproved PRDs, or…

• Webflow Cli:Cloud

  by @webflow

  Create, build, and deploy Webflow Cloud apps from the CLI (site-attached or project apps), and manage existing ones — apps, domains, environments, deployments, build/runtime logs, and environment variables including secrets. Use…

• Webflow Mcp:Site Activity

  by @webflow

  Query and summarize site activity logs for a Webflow enterprise site. Surfaces recent changes, identifies who made them, and generates human-readable activity reports. Use for site monitoring, change tracking, publish…