Devops AI agent skills

4,131 skills in the archive. Read a skill’s instructions or open its original repository.

• Atlas Map

  by @tonone-ai

  Map the system architecture — read the codebase, identify services and connections, output a C4-level architecture map as Mermaid diagrams with component descriptions. Use when asked to "map the architecture", "system diagram",…

• Brace Escalate

  by @tonone-ai

  Design escalation path -- Tier 1 to Tier 2 to Engineering handoff, decision criteria, and communication templates. Use when asked to "design our escalation process", "when should support escalate to engineering", "build an…

• Apex Plan

  by @tonone-ai

  Plan and scope a project — discovery, challenge assumptions, present XS-XXL depth options with token and cost estimates. Use when asked to "plan this", "scope this", "how should we build X", or when a new project/feature request…

• Atlas Recon

  by @tonone-ai

  Documentation reconnaissance for takeover — find all docs, assess accuracy, freshness, coverage, and discoverability, and identify critical knowledge gaps. Use when asked "what docs exist", "documentation assessment", or…

• Ionic Appflow Migration

  by @Cap-go

  Guides the agent through migrating an existing Ionic or Capacitor project away from Ionic Appflow. Use when detecting Appflow live updates, cloud builds, or store deployment flows and replacing them with Capgo live updates plus…

• Docs Applies To Tagging

  by @elastic

  Validate and generate applies_to tags in Elastic documentation, including for cumulative docs across versions and deployment types. Use when writing new docs pages, reviewing existing pages for correct applies_to usage, deciding…

• Capgo Release Workflows

  by @Cap-go

  Guides the agent through setting up Capgo-centered release workflows for Capacitor apps. Use when the user needs a unified path for live updates, native builds, and app store publishing using Capgo plus repository-owned CI/CD.…

• Capgo Live Updates

  by @Cap-go

  Complete guide to implementing live updates in Capacitor apps using Capgo. Covers account creation, plugin installation, configuration, update strategies, and CI/CD integration. Use this skill when users want to deploy updates…

• Capacitor Ci Cd

  by @Cap-go

  Complete CI/CD guide for Capacitor apps covering GitHub Actions, GitLab CI, build automation, app signing, and deployment pipelines. Use this skill when users need to automate their build and release process.

• Capgo Cloud

  by @Cap-go

  Umbrella skill for Capgo cloud workflows. Use when the user needs native builds, OTA releases, store publishing, or organization-level Capgo operations and the request spans more than one Capgo workflow.

• Docs Flag Jargon Skill

  by @elastic

  Flag Elastic-internal jargon in documentation and suggest plain-language replacements. Use when reviewing, writing, or editing docs to catch terms that external readers would not understand.

• Operating Livekit Agents

  by @livekit

  Deploys and operates a LiveKit agent in production: shipping a version to LiveKit Cloud and rolling it back, secrets and configuration, the worker process model and prewarming, safe async inside worker processes, provider…

• Package Release Sniffer

  by @JasonxzWen

  Load when tracking newly published package or model-package releases across package registries and release feeds for AI/developer-tool monitoring; do not load for ordinary docs lookup, broad GitHub trend scanning, or…

• Web Design Guidelines

  by @JasonxzWen

  Load when a task needs UI, UX, accessibility, or web interface guideline compliance review; use frontend-design when creating or changing production UI.

• Azure Kubernetes

  by @seaworld008

  Plan and configure Azure Kubernetes Service clusters, including SKU, networking, identity, deployment readiness, and operational constraints.

• Blockchain Web3

  by @brucesongs

  Blockchain & Web3 security — Solidity/Vyper smart contract auditing, DeFi attack vectors (flash loans, MEV, oracle manipulation), bridge attacks, wallet security, with tooling from Slither/Mythril/Foundry.

• Autonomous Loops

  by @brucesongs

  Performing repetitive enumeration across many targets - Running batch vulnerability scans on multiple hosts - Monitoring for changes in target environment - Executing attack chains that require iterative steps - User says…

• Cloud Security

  by @brucesongs

  Cloud security covers security assessment for major cloud platforms including AWS, Azure, and GCP, with core focus on IAM misconfiguration detection, storage bucket exposure scanning, metadata service attacks, container escape,…

• Ai Security

  by @brucesongs

  Semantic-layer attack testing against AI systems and LLM-integrated applications.

• Ai Fuzzing

  by @brucesongs

  AI-assisted fuzzing for automated vulnerability discovery. Coverage-guided fuzzing engines, AI-driven seed generation, intelligent mutation strategies, and systematic crash triage.

• Av Edr Evasion

  by @brucesongs

  AV/EDR evasion covers techniques for bypassing antivirus (AV) and Endpoint Detection/Response (EDR) solutions during payload delivery, execution, and post-exploitation.

• Dns Attacks

  by @brucesongs

  DNS Attacks exploit the Domain Name System protocol for reconnaissance, spoofing, tunneling, and data exfiltration. DNS is a foundational infrastructure service that is frequently misconfigured, poorly monitored, and trusted by…

• Container Security

  by @brucesongs

  Container security covers the complete lifecycle from image building, registry management, runtime protection, to orchestration platform (Kubernetes) security.

• Cloud Identity Attack

  by @brucesongs

  Cloud identity provider attacks covering Azure AD/Entra ID, Okta, Auth0, Ping, AWS IAM Identity Center, and Google Workspace — including OAuth 2.0 token theft, OIDC redirect abuse, SAML response forgery, conditional access…

• Browser Qa

  by @brucesongs

  Automated browser-based security testing using Playwright and browser devtools. Interact with web applications as a user would — click, type, navigate — while monitoring network traffic, JavaScript execution, and DOM changes for…

• Ci Cd Supply Chain Attack

  by @brucesongs

  CI/CD pipeline and software supply chain compromise covering Jenkins (script console, Jenkinsfile injection, shared library abuse, CVE-2024-23897 args4j), GitLab CI/CD (runner abuse, .gitlab-ci.yml injection, self-hosted runner…

• Agentic Pentest

  by @brucesongs

  LLM-driven autonomous penetration testing framework operations covering PentestGPT, HexStrike AI, Viper, PentestAgent, AI-Infra-Guard, AutoPWN, and custom agent harness patterns — including reasoning chain orchestration, tool…

• Docker Patterns

  by @brucesongs

  Setting up a practice lab for penetration testing techniques - Creating isolated environments for exploit development and testing - Building vulnerable application targets for training - Testing tools against known-vulnerable…

• Edge Computing Attack

  by @brucesongs

  Attacks against edge computing platforms — Cloudflare Workers (V8 isolate), Fastly Compute@Edge (WASM/Wasmtime), AWS Lambda@Edge and CloudFront Functions, Akamai EdgeWorkers, Vercel Edge Functions, and Deno Deploy. Covers V8…

• Deception Honeypot

  by @brucesongs

  Defensive deception and honeypot deployment covering SSH/Telnet (Cowrie), web (OpenCanary), enterprise (HFish), ICS/SCADA (Conpot), all-in-one (T-Pot), AI-driven deception (Beelzebub), Thinkst Canarytokens (DNS, HTTP, file, AWS…

• Detection Engineering

  by @brucesongs

  Detection-as-code engineering covering Sigma rule authoring, YARA signature development, Splunk SPL / Kusto KQL / Elastic EQL queries, MITRE ATT&CK mapping, detection CI/CD pipelines, false-positive tuning, and rule testing…

• 5g Telecom Attack

  by @brucesongs

  5G core (AMF/SMF/UPF), RAN, signaling (PFCP/GTP/Diameter/SS7), IMSI catchers, O-RAN security, roaming abuse, SMS interception, and telecom infrastructure red team operations.

• Cspm Casb Attack

  by @brucesongs

  CSPM/CASB/CNAPP platform bypass and abuse — rule suppression exploitation, IaC state manipulation, CASB proxy evasion, SaaS shadow discovery, Wiz/Prisma/Lacework/Defender coverage gap identification, and tag-tampering attacks…

• Ai Agent Framework Attack

  by @brucesongs

  AI agent framework attack surface — orchestration-layer compromise of LangChain (Python/JS), LangGraph, CrewAI, Microsoft AutoGen, OpenAI Assistants API v2, Anthropic Claude Agent SDK, LlamaIndex, Microsoft Semantic Kernel,…

• Cps Attack

  by @brucesongs

  Cyber-Physical Systems (CPS) attacks — PLCs (Siemens S7, Rockwell ControlLogix, Schneider Modicon, Mitsubishi MELSEC), ICS protocols (Modbus, DNP3, Profinet, EtherNet/IP, IEC 61850, OPC UA), HMIs, SCADA historians, OT-to-IT…

• Data Platform Attack

  by @brucesongs

  Attacks against cloud data platforms and analytics pipelines — Snowflake, Databricks, BigQuery, Redshift, dbt, Apache Airflow, and lakehouse architectures. Covers identity-based breaches (no perimeter), warehouse SQL injection…

• Data Exfiltration Attack

  by @brucesongs

  Attacks for exfiltrating data from compromised networks and bypassing DLP/egress controls. Covers DNS tunneling, ICMP/HTTPS tunneling, protocol smuggling, steganographic exfil, cloud-native exfil (S3/OpenSearch/BigQuery), and…

• Ad Cs Abuse

  by @brucesongs

  Active Directory Certificate Services (AD CS) abuse — ESC1-ESC15 attack patterns, PKINIT, PetitPotam to AD CS to Domain Admin chains, CVE-2022-26923 (Certifried), Shadow Credentials, Golden Certificate, certificate template ACL…

• Comply

  by @seaworld008

  Regulatory compliance and audit agent. Maps business regulatory requirements (SOC2/PCI-DSS/HIPAA/ISO 27001), checks control implementations, designs audit trails, and implements Policy as Code. Use when compliance auditing is…

• Data Loss Prevention Bypass

  by @brucesongs

  DLP bypass techniques covering steganography (LSB, audio, video), DNS tunneling, ICMP tunneling, cloud sync abuse (Dropbox, OneDrive), WebSocket/HTTP3 exfil, AI-augmented exfil (semantic chunking), and modern DLP evasion patterns.

• Edge Computing Security

  by @brucesongs

  Edge computing security testing covering CDN bypass, Cloudflare Workers abuse, AWS Lambda@Edge attacks, cache poisoning, origin IP discovery, WAF bypass, and edge function injection.

• Ai Agent Supply Chain Attack

  by @brucesongs

  AI/ML supply chain attacks — model poisoning, Pickle RCE, Hugging Face / Ollama registry compromise, LangChain plugin backdoors, OpenClaw / ClawHub ecosystem threats. Distinguishes from ci-cd-supply-chain-attack by focusing on…

• Aws Solution Architect

  by @seaworld008

  Design or review AWS architecture and infrastructure as code for serverless systems, migrations, scaling, reliability, and cost constraints.

• Deprecation And Migration

  by @seaworld008

  Plan deprecation and migration of systems, APIs, and production schemas, including expand-contract changes with compatibility and rollback requirements.

• Codebase Onboarding

  by @seaworld008

  Create repository onboarding guides with architecture, key files, setup, debugging, and contribution workflows for a defined audience.

• Physical Chemistry

  by @Tibsfox

  Chemical equilibrium, chemical kinetics, and electrochemistry — the quantitative core of physical chemistry. Covers equilibrium constants (Keq, Kc, Kp), Le Chatelier's principle, ICE tables, buffers and the Henderson-Hasselbalch…

• Mlops And Deployment

  by @Tibsfox

  MLOps and the production ML lifecycle -- model packaging and serving, CI/CD for ML, experiment tracking, model registries, reproducibility, production monitoring for data and concept drift, retraining pipelines, A/B and shadow…

• Ethics Governance

  by @Tibsfox

  Bias detection and mitigation, fairness metrics, privacy frameworks, consent models, transparency requirements, and accountability structures for data science practice. Covers algorithmic bias sources, disparate impact testing,…

• Network Fundamentals Cloud

  by @Tibsfox

  Networking fundamentals as they apply to cloud infrastructure — virtual networks, subnets, routers, NAT, floating IPs, security groups, VLAN/VXLAN segmentation, load balancing, SDN concepts, and how Neutron-style cloud networks…

• Reliability Engineering Cloud

  by @Tibsfox

  Reliability engineering for cloud systems — SLIs, SLOs, error budgets, SRE practices, runbooks, incident response, on-call rotation, blameless postmortems, chaos engineering, and the NASA Systems Engineering methodology…

• Materials Chemistry

  by @Tibsfox

  States of matter, phase transitions, kinetic molecular theory, atmospheric chemistry, green chemistry, and sustainable synthesis. Covers solid/liquid/gas/plasma properties, phase diagrams, vapor pressure, gas laws, ozone…

• Machine Learning Foundations

  by @Tibsfox

  Supervised and unsupervised learning, bias-variance tradeoff, cross-validation, decision trees, ensemble methods, neural network fundamentals, and the practitioner's workflow from problem framing through deployment. Covers…

• Stellar Spectroscopy

  by @Tibsfox

  Stellar spectral analysis from first light to chemical abundance. Covers continuum emission and absorption, the OBAFGKM classification sequence, luminosity classes, line identification, Doppler shifts, curve-of-growth abundance…

• Orbital Mechanics

  by @Tibsfox

  Classical orbital mechanics from Kepler to Hohmann. Covers the six orbital elements, Kepler's three laws, vis-viva, orbit types (circular, elliptical, parabolic, hyperbolic), transfer orbits, gravity assists, the two-body…

• Docker Expert

  by @seaworld008

  Use when containerizing an application with Docker, optimizing multi-stage builds and image size, designing Docker Compose services, troubleshooting container networking or volumes, or adding secure image build and CI/CD…

• Ralph Json Create Issues

  by @richtabor

  Converts a PRD or plan markdown file into prd.json format for ralph-json-start-loop to execute autonomously. Use when user wants to convert a PRD or plan to JSON stories.

• Competitive Teardown

  by @seaworld008

  Analyze competitors from product, pricing, reviews, SEO, and hiring evidence to produce feature comparisons, positioning, and actionable recommendations.

• Cc Devops Skills

  by @seaworld008

  SRE, DevOps, Kubernetes, CI/CD, PromQL, Terraform, Docker, and incident operations playbook for building reliable delivery and operations workflows.

• Git Workflow

  by @LangConfig

  Expert guidance for Git workflows, branching strategies, and version control best practices. Use when managing repositories, resolving conflicts, or establishing team workflows.

• Aws Skills

  by @SamarthaKV29

  AWS development with infrastructure automation and cloud architecture patterns

• Perseus:Start

  by @kaivyy

  Use when you want to run a full, automated penetration test from start to finish (Scan -> Audit -> Exploit -> Report)

• Perseus Config

  by @kaivyy

  Security configuration analysis (Headers, CORS, Docker, CI/CD, Cloud, K8s)

• Lov Env Management

  by @lovstudio

  统一管理平台、账号与多组 API Key，维护有效期和启用状态，安全同步到 zsh 或用户会话环境，并提供脱敏 Dashboard；用户说“管理环境变量”“rotate API keys”时使用。

• Lov Domain Cutover

  by @lovstudio

  在 ICP 通过后把备案域名安全切换到中国大陆网站，核验部署、DNS、证书、HTTPS、ICP 页脚和旧域名处理；用户说“备案通过后绑定域名”或 "cut over the filed domain" 时使用。

• Lov App Generator

  by @lovstudio

  Use when the user asks for "App生成器", "生成 Web App", "生成 Tauri App", "生成原生 macOS App", "Finder Quick Action", "只创建 web", or to standardize an existing app with branding, CI/CD, native integration, and Lovinsp where applicable.

• Twg Jira

  by @zenobi-us

  Use with root `twg` for Jira workitems, projects, boards, sprints, fields, transitions, comments, links, and administration. Applies Jira semantics and safe mutation rules.

• Twg Operational Health

  by @zenobi-us

  Use with the root `twg` skill for on-call handoffs, incident response and investigation, post-incident reviews, reliability reviews, Assets refresh, capacity views, meeting summaries, and operational risk readouts.

• Gradient

  by @GadaaLabs

  ML-specific patterns for data pipelines, model training, MLOps, and evaluation — domain expertise for machine learning engineers

• Cyberpunk Help

  by @zenobi-us

  Help with a Cyberpunk 2077 playthrough on Windows, Linux, or macOS (Vortex or manual mods): missions, Night City locations, save state, and CET console commands. On first use in a conversation (or when the deploy list changes /…

• Simple English

  by @zenobi-us

  Write or rewrite technical text with the rules of ASD-STE100 Simplified Technical English so it is clear, unambiguous, and free of AI slop. Use for documentation, READMEs, runbooks, procedures, error messages, release notes,…

• Lov Deploy To Vercel

  by @lovstudio

  Deploy frontend projects to Vercel with automatic custom domain setup. Handles Vite, Next.js, CRA, and static sites. Auto-configures Cloudflare DNS CNAME records and Vercel domain aliases. Supports SPA routing via vercel.json.…

• Sop Maintenance

  by @zenobi-us

  Use when updating, versioning, deprecating, or maintaining existing Standard Operating Procedures. Covers keeping SOPs accurate, relevant, and synchronized with implementation changes.

• Prisma Cli

  by @prisma

  Prisma ORM 7 CLI reference for existing Prisma 7 applications or explicitly selected Prisma 7 workflows. Covers prisma init, generate, migrate, db, dev, studio, and mcp. For setup, connection repair, or Prisma 8, use…

• Laravel 13 App Guidelines

  by @thienanblog

  Implement Laravel 13 changes or upgrade Laravel 12 to 13 using verified package versions and project conventions. Use only for the installed or requested major; optional framework features are not required dependencies.

• Vps Docker Traefik Deploy

  by @thienanblog

  Prepare or operate production Docker Compose deployments on a VPS with Traefik, DNS, registries, persistent storage, backups, and rollback. Use for production infrastructure and releases, rather than local development.

• Testing Verification

  by @thienanblog

  Design or assess tests, acceptance checks, CI coverage, and browser verification. Use when verification is the main deliverable or requires specialist judgment; ordinary implementation can keep its focused checks inline.

• Starter

  by @ww-w-ai

  Static web development skill for beginners and non-developers. Covers HTML/CSS/JavaScript and Next.js App Router basics. Project initialization with "init starter" or "starter init". Use proactively when user is a beginner or…

• Bkend Security

  by @ww-w-ai

  bkend.ai security policies and encryption expert skill. Covers API key management (Public vs Secret), Row Level Security (RLS) with 4 roles (admin/user/guest/self), data encryption (Argon2id, AES-256-GCM, TLS 1.2+), and security…

• Enterprise

  by @ww-w-ai

  Enterprise-grade system development with microservices, Kubernetes, and Terraform. Includes AI Native methodology and Monorepo architecture patterns. Project initialization with "init enterprise" or "enterprise init". Use…

• Skill Create

  by @ww-w-ai

  Create new project-local skills with proper directory structure and SKILL.md template. Generates a ready-to-use skill that Gemini CLI can activate immediately. Use proactively when user wants to create a new custom skill or…

• Audit

  by @ww-w-ai

  Query audit trail logs, decision traces, and session history for AI transparency. Provides searchable access to all bkit audit records via MCP tools. Use proactively when user wants to review past decisions, trace actions, or…

• Deploy

  by @ww-w-ai

  Deployment guidance and checklist for dev, staging, and production environments. Creates a checkpoint before deploy and provides a structured pre-deploy checklist. Use proactively when user mentions deploying, releasing, or…

• Zero Script Qa

  by @ww-w-ai

  Zero Script QA - Testing methodology without test scripts. Uses structured JSON logging and real-time Docker monitoring. Use proactively when user needs to verify features through log analysis. Triggers: zero script qa,…

• Bkit Rules

  by @ww-w-ai

  Core rules for bkit plugin. PDCA methodology, level detection, agent auto-triggering, and code quality standards. Use proactively when user requests feature development or code changes. Triggers: bkit, PDCA, develop, implement,…

• Phase 9 Deployment

  by @ww-w-ai

  Skill for deploying to production environment. Covers CI/CD, environment configuration, and deployment strategies. Use proactively when user is ready to deploy. Triggers: deployment, CI/CD, production, Vercel, Kubernetes,…

• Output Style Setup

  by @ww-w-ai

  Install bkit output styles to your project or user directory. Copies output style files from bkit plugin to the appropriate location. Triggers: output style setup, install output style, setup style, 아웃풋 스타일 설치, 스타일 설정, 出力スタイル設定,…

• Loop

  by @ww-w-ai

  Run a prompt or command on a recurring interval. Useful for monitoring, polling, or periodic checks. Triggers: loop, recurring, interval, monitor, poll, cron, 반복, 주기적, 모니터링, ループ, 定期的, 監視, 循环, 定期, 监控, bucle, intervalo,…

• Pinak Frontend Guru

  by @viralcode

  Expert UI/UX and React performance auditor (PinakBot persona). Use when a user needs a "deep audit" of their frontend code, wants to "make it pro", or needs advice on both React performance and Web design best practices.…

• Nodetool

  by @viralcode

  Visual AI workflow builder - ComfyUI meets n8n for LLM agents, RAG pipelines, and multimodal data flows. Local-first, open source (AGPL-3.0).

• BotBowl Party Agent Guide

  by @viralcode

  Complete guide for AI agents to participate in BotBowl Party — a virtual Super Bowl party for bots

• Postgres Semantic Search

  by @laguagu

  PostgreSQL-based semantic and hybrid search with pgvector and ParadeDB. Use when implementing vector search, semantic search, hybrid search, or full-text search in PostgreSQL. Covers pgvector indexing, hybrid FTS/BM25 + RRF,…

• Nextjs Chatbot

  by @laguagu

  Advanced patterns for production Next.js web chatbots built with AI SDK 7 (with a fallback table for projects still on v6) + ai-elements. Covers tool calling with human-in-the-loop (HITL) approval, PostgreSQL session…

• Openai Agents Sdk

  by @laguagu

  OpenAI Agents SDK (Python) development. Use when building AI agents, multi-agent handoffs, function tools, guardrails, sessions, streaming, or tracing with the `openai-agents` / `agents` Python package — including Azure OpenAI…

• Ai Sdk 7

  by @laguagu

  Vercel AI SDK v7 development and migration. Use when building or upgrading AI SDK 7 apps, especially ToolLoopAgent, WorkflowAgent, HarnessAgent, Claude Code/Codex/Pi harnesses, runtimeContext, toolsContext, toolApproval,…

• Convex Quickstart

  by @get-convex

  Get a barebones Convex + web template running from a one-sentence idea.

• Convex

  by @get-convex

  Convex is the backend agents get right on the first try: an all-TypeScript reactive platform where the database, server functions, scheduling, file storage, auth, and realtime sync are one type-safe system, every function is a…

• Convex Expert

  by @get-convex

  Convex backend specialist. Use this agent for any code inside a `convex/` directory — function definitions, schemas, indexes, queries, mutations, actions, HTTP endpoints, cron jobs, file storage, auth wiring, and component…

• Convex Design

  by @get-convex

  Design and build reactive, type-safe, production-grade backends on Convex. Covers schema, queries/mutations/actions, indexes, auth, file storage, scheduling, real-time multiplayer, mobile backends, and LLM/agent workflows on…

• Convex Explain App

  by @get-convex

  Explain an existing Convex app — data model + relationships, public vs internal functions, auth/ownership model, components, a request→data flow — read from the schema and function surface. Read-only.

• Convex Self Heal

  by @get-convex

  Production error → triaged, root-caused, repaired, and certified (tsc + rehearsal + reproduce-then-gone) fix PR for a human to merge — then confirm the error stops recurring. Never auto-merges.