DevOps-Security-Agent-Skills

A large base of DevOps, security, infrastructure and compliance skills for AI agents

  • 1,202 ★ on the repository
  • Last commit
  • MIT
Skill

Minimal access

Why this level

  • The skills are references and practices and do not perform operations
All reasons and checks

bagelhole/devops-security-agent-skills

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add skills/devops-security-agent-skills

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Minimal accessThe tool runs nothing and makes no network calls.

  • The skills are references and practices and do not perform operations

This is third-party code. Review the repository files before installing.

What it does

The set gives the agent practical DevOps and security knowledge: Kubernetes, Terraform, AWS, Azure and GCP clouds, secrets handling, container hardening, auditing and business continuity. The skills are grouped into compliance, devops, infrastructure and security sections, each described in a SKILL.md and usable by any agent that reads files. There are dedicated AI-security skills too: guardrails for coding agents, MCP server hardening and red teaming. It installs through the skills CLI for several agents at once or by cloning.

Who it is for. For DevOps engineers and security specialists working through an AI agent.

Good fit when

  • You need Kubernetes, Terraform or cloud knowledge in the agent
  • You need to harden containers, secrets or an MCP server
  • You need auditing and compliance material

Not a fit when

  • You need a runnable tool rather than reference knowledge
  • The work is far from infrastructure and security

Example request

Review my Terraform and advise how to harden secrets handling

Limitations

The skills provide knowledge and practices but do not perform operations for you and do not replace vetted pipelines and policies. The material is in English. The full set is large, so install the skills you need.

How to disable. Remove the installed skills via the skills CLI or their folder from the agent's skills directory.

FAQ

Which agents does it work with?

Claude Code, Cursor, Codex, OpenCode, Cline and other agents that read skill files.

Can I install just one skill?

Yes, via the --skill flag in the skills CLI, for example kubernetes-ops.

Discussion

No questions or reviews yet.

Skills
Official

Forty-five skills, custom agents and CloudFormation templates for AWS DevOps Agent: incident analysis and operations reviews

SkillExtended access141Repository stars
Editors’ pick

Microsoft Learn skills for nearly every Azure service: limits, configuration, security, architecture and troubleshooting with doc links

SkillExtended access813Repository stars

A set of skills for agent work with AWS: common cloud service tasks packaged as ready instructions for a coding agent

SkillExtended access1.2KRepository stars

31 DevOps skills for Claude Code and Codex: config generators, validators and a Kubernetes debugger for Terraform, Helm, CI and Docker

SkillExtended access339Repository stars

KubeShark skill: the agent finds the failure mode first, then writes manifests, Helm and Kustomize to official practice with a rollback plan

SkillMinimal access477Repository stars

Docker Skills

docker-skills

Official

Official Docker skills for agents: Dockerfile and builds, Compose, Sandboxes, Docker Agent and a skill that confirms irreversible actions

SkillMinimal access629Repository stars

README in short

The README describes a base of over a hundred DevOps, security, infrastructure and compliance skills for any file-reading agent. Installation goes through the skills CLI for several agents at once, individual skills via a skill flag, with a clone option too. The skills are laid out into compliance, devops, infrastructure and security sections, including AI and MCP security. MIT licensed.

README badge

Original SKILL.md

---
name: mcp-server-security
description: Secure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.
license: MIT
metadata:
  author: devops-skills
  version: "1.0"
---

# MCP Server Security

Comprehensive hardening guide for Model Context Protocol (MCP) servers.

Report a problem