---
## Why This Exists
Install these skills and your agent gains expert-level knowledge of:
| Domain | Skills | What Your Agent Learns |
|--------|--------|----------------------|
| ๐ง **DevOps** | 40+ | CI/CD pipelines, K8s ops, observability, release strategies, platform engineering |
| ๐ **Security** | 35+ | Vulnerability scanning, secrets management, hardening, AI agent security, MCP security |
| โ๏ธ **Infrastructure** | 65+ | AWS, Azure, GCP, Cloudflare, databases, networking, GPU clusters, local AI |
| ๐ค **AI Engineering** | 20+ | LLMOps, agent evals, RAG infrastructure, inference scaling, coding agent guardrails |
| ๐ **Compliance** | 20+ | SOC2, HIPAA, GDPR, PCI-DSS, policy-as-code, auditing |
| ๐ป **IT Operations** | 5+ | Device management, identity/SSO, SaaS security, troubleshooting |
---
## 30-Second Install
```bash
# Install all skills to Claude Code, Cursor, Codex, or any supported agent
npx skills add bagelhole/DevOps-Security-Agent-Skills
# Install specific skills
npx skills add bagelhole/DevOps-Security-Agent-Skills --skill kubernetes-ops --skill hashicorp-vault -a cursor -y
# Or clone directly
git clone https://github.com/bagelhole/DevOps-Security-Agent-Skills.git ~/.skills/devops-security
```
Works with **Claude Code**, **Cursor**, **Codex**, **OpenCode**, **Cline**, and [many more](https://github.com/vercel-labs/skills#supported-agents).
---
## What Makes This Different
Most "awesome lists" give you links. This repo gives your AI agent **production-ready knowledge** it can act on:
```yaml
# Every skill includes real, copy-pasteable configs like this:
apiVersion: apps/v1
kind: Deployment
metadata:
name: myapp
spec:
replicas: 3
template:
spec:
containers:
- name: myapp
image: myapp:1.0.0
resources:
requests: { memory: "128Mi", cpu: "100m" }
limits: { memory: "256Mi", cpu: "500m" }
securityContext:
runAsNonRoot: true
readOnlyRootFilesystem: true
```
### What's in Each Skill
```
skill/
โโโ SKILL.md # 250-400+ lines of expert knowledge
โ โโโ When to Use # Decision guidance
โ โโโ Prerequisites # What you need
โ โโโ Real Configs # Copy-pasteable YAML, JSON, HCL, Bash
โ โโโ CLI Commands # Exact commands to run
โ โโโ Troubleshooting # Common issues + fixes
โ โโโ Related Skills # Cross-references
โโโ scripts/ # Ready-to-run automation
โโโ references/ # Deep-dive guides
โโโ assets/ # Config templates
```
---
## Hot Topics (March 2026)
Skills you won't find in other repos:
| Skill | Why It's Hot |
|-------|-------------|
| [**MCP Server Security**](security/ai/mcp-server-security/) | MCP is everywhere โ secure your tool servers |
| [**AI Coding Agent Guardrails**](security/ai/ai-coding-agent-guardrails/) | Safe Claude Code/Cursor/Codex usage for teams |
| [**eBPF Observability**](devops/observability/ebpf-observability/) | Kernel-level monitoring with Cilium & Tetragon |
| [**Platform Engineering**](devops/platforms/platform-engineering/) | Build internal developer platforms with Backstage |
| [**Supply Chain Attack Response**](security/scanning/supply-chain-attack-response/) | Detect & respond to compromised dependencies |
| [**OpenTofu Migration**](infrastructure/iac/opentofu-migration/) | Migrate from Terraform to the open-source fork |
| [**Dev Containers & Nix**](devops/developer-experience/devcontainers-nix/) | Reproducible dev environments for teams |
| [**Agent Evals**](devops/ai/agent-evals/) | CI/CD gates for AI agent quality & safety |
---
## How It Works
[Agent Skills](https://agentskills.io) is an open format for extending AI agents. Each `SKILL.md` has YAML frontmatter that agents load for matching, and detailed instructions that load only when activated:
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 1. DISCOVER 2. MATCH 3. ACTIVATE โ
โ โ
โ Agent scans โ User asks about โ Agent reads full โ
โ skill folders Kubernetes SKILL.md + runs โ
โ at startup debugging scripts as needed โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
---
## ๐ Quick Start
### Option 1: skills.sh CLI (Recommended)
The [skills](https://github.com/vercel-labs/skills) CLI discovers every `SKILL.md` in this repository and installs them into your agent's skills directory. See [CLI docs](https://skills.sh/docs/cli) and [FAQ](https://skills.sh/docs/faq).
```bash
# Install all skills
npx skills add bagelhole/DevOps-Security-Agent-Skills
# List available skills
npx skills add bagelhole/DevOps-Security-Agent-Skills --list
# Install specific skills to a specific agent
npx skills add bagelhole/DevOps-Security-Agent-Skills --skill kubernetes-ops --skill hashicorp-vault -a cursor -y
# Global install
npx skills add bagelhole/DevOps-Security-Agent-Skills -g -y
# Install a single skill by URL
npx skills add https://github.com/bagelhole/DevOps-Security-Agent-Skills/tree/main/devops/orchestration/kubernetes-ops
```
Install from a **local clone**: `npx skills add . --list` from the repo root.
### Option 2: Clone or Submodule
```bash
# Clone
git clone https://github.com/bagelhole/DevOps-Security-Agent-Skills.git ~/.skills/devops-security
# Or add as a submodule
git submodule add https://github.com/bagelhole/DevOps-Security-Agent-Skills.git .skills/devops-security
```
### Option 3: For Humans
No agent? No problem. Browse the skills, copy the configs, run the scripts. MIT licensed โ go wild.
---
## ๐ Skill Catalog
### If this made your agent smarter, **[star this repo](https://github.com/bagelhole/DevOps-Security-Agent-Skills)** โ it helps others find it.
Built by [Toby Miller](https://github.com/bagelhole)
**[โฌ Back to Top](#-devops--security-agent-skills)**
