---
## π‘ The Problem
You're a **solo founder**, **indie hacker**, or **one-person DevOps team**. You need to:
- Set up CI/CD pipelines across 5 different platforms
- Harden your Linux servers (but you forgot the sysctl parameters)
- Write that Terraform module for the 47th time
- Remember how CloudTrail works... again
- Configure Kubernetes security contexts properly
- Actually understand what SOC2 needs
**You can't remember everything. You shouldn't have to.**
---
## π The Solution
This repo is a **comprehensive knowledge base** designed to be loaded into AI agents. It's your **DevOps second brain** β battle-tested scripts, production-ready configs, and expert knowledge organized using the [Agent Skills](https://agentskills.io) format. You can install them with the [skills.sh](https://skills.sh/docs) CLI (`npx skills add`, [CLI docs](https://skills.sh/docs/cli), [FAQ](https://skills.sh/docs/faq)) alongside cloning this repository:
| Domain | What You Get |
|--------|--------------|
| π§ **DevOps** | CI/CD, containers, K8s, observability, release management |
| π **Security** | Scanning, secrets, hardening, network security, incident response |
| βοΈ **Infrastructure** | AWS, Azure, GCP, servers, networking, databases, storage |
| π€ **AI & Platforms** | Agent infrastructure, local LLM ops, and modern app platforms |
| π **Compliance** | SOC2, HIPAA, GDPR, PCI-DSS, governance, auditing |
---
## β¨ What's Inside
This isn't just documentation. Each skill includes:
```
skill/
βββ SKILL.md # AI-readable instructions & knowledge
βββ scripts/ # Ready-to-run automation scripts
βββ references/ # Deep-dive guides & cheatsheets
βββ assets/ # Config templates & examples
```
### π― Real Examples
**Need to debug a crashing pod?**
```bash
./devops/orchestration/kubernetes-ops/scripts/pod-debug.sh my-pod
```
**Hardening a fresh Linux server?**
```bash
./security/hardening/linux-hardening/scripts/harden-system.sh --apply
```
**Setting up Vault from scratch?**
```bash
./security/secrets/hashicorp-vault/scripts/vault-init.sh
```
**Collecting evidence during an incident?**
```bash
./security/operations/incident-response/scripts/collect-evidence.sh INC-2024-001
```
---
## π§ How It Works
[Agent Skills](https://agentskills.io) is an open format for extending AI agent capabilities. Here's the flow:
```
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β 1. DISCOVER 2. MATCH 3. ACTIVATE β
β β
β Agent scans β User asks about β Agent reads full β
β skill folders Kubernetes SKILL.md + runs β
β at startup debugging scripts as needed β
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
```
Each `SKILL.md` has YAML frontmatter (name + description) that agents load at startup for matching, and markdown instructions that get loaded only when the skill is activated. This keeps context usage efficient.
π **Full spec:** [agentskills.io/specification](https://agentskills.io/specification)
---
## π Quick Start
### 1. Install with the skills CLI ([skills.sh](https://skills.sh/docs))
The [skills](https://github.com/vercel-labs/skills) CLI discovers every `SKILL.md` in this repository (including nested paths) and can symlink or copy them into your agentβs skills directoryβ**Cursor**, **Claude Code**, **Codex**, **OpenCode**, and [many others](https://github.com/vercel-labs/skills#supported-agents) are supported. See the [CLI reference](https://skills.sh/docs/cli) and [FAQ](https://skills.sh/docs/faq) for details.
```bash
# Install from GitHub (use your forkβs owner/repo if different)
npx skills add bagelhole/DevOps-Security-Agent-Skills
# List skills without installing
npx skills add bagelhole/DevOps-Security-Agent-Skills --list
# Install specific skills to Cursor, non-interactively
npx skills add bagelhole/DevOps-Security-Agent-Skills --skill kubernetes-ops --skill hashicorp-vault -a cursor -y
# Global install (~/) instead of the current project
npx skills add bagelhole/DevOps-Security-Agent-Skills -g -y
# Install a single skill by path in the repo
npx skills add https://github.com/bagelhole/DevOps-Security-Agent-Skills/tree/main/devops/orchestration/kubernetes-ops
```
You can also install from a **local clone** of this repo: `npx skills add . --list` from the repository root.
### 2. Download the Skills (clone or submodule)
```bash
# Clone to your skills directory
git clone https://github.com/bagelhole/DevOps-Security-Agent-Skills.git ~/.skills/devops-security
# Or add as a submodule to your project
git submodule add https://github.com/bagelhole/DevOps-Security-Agent-Skills.git .skills/devops-security
```
### 3. Integrate with Your Agent
**Filesystem-based agents** (Cursor, Claude with computer use, Cline, etc.) are the easiest β the agent can read skills directly:
```bash
# Agent reads skill when needed
cat ~/.skills/devops-security/devops/orchestration/kubernetes-ops/SKILL.md
```
**Tool-based agents** need skills injected into the system prompt. Use the [skills-ref](https://github.com/agentskills/agentskills/tree/main/skills-ref) CLI:
```bash
# Generate XML for your agent's system prompt
skills-ref to-prompt ~/.skills/devops-security/devops/ci-cd/*
# Output:
# 
