---
## ๐ก The Problem
You're a **solo founder**, **indie hacker**, or **one-person DevOps team**. You need to:
- Set up CI/CD pipelines across 5 different platforms
- Harden your Linux servers (but you forgot the sysctl parameters)
- Write that Terraform module for the 47th time
- Remember how CloudTrail works... again
- Configure Kubernetes security contexts properly
- Actually understand what SOC2 needs
**You can't remember everything. You shouldn't have to.**
---
## ๐ The Solution
This repo is a **comprehensive knowledge base** designed to be loaded into AI agents. It's your **DevOps second brain** โ battle-tested scripts, production-ready configs, and expert knowledge organized using the [Agent Skills](https://agentskills.io) format:
| Domain | What You Get |
|--------|--------------|
| ๐ง **DevOps** | CI/CD, containers, K8s, observability, release management |
| ๐ **Security** | Scanning, secrets, hardening, network security, incident response |
| โ๏ธ **Infrastructure** | AWS, Azure, GCP, servers, networking, databases, storage |
| ๐ค **AI & Platforms** | Agent infrastructure, local LLM ops, and modern app platforms |
| ๐ **Compliance** | SOC2, HIPAA, GDPR, PCI-DSS, governance, auditing |
---
## โจ What's Inside
This isn't just documentation. Each skill includes:
```
skill/
โโโ SKILL.md # AI-readable instructions & knowledge
โโโ scripts/ # Ready-to-run automation scripts
โโโ references/ # Deep-dive guides & cheatsheets
โโโ assets/ # Config templates & examples
```
### ๐ฏ Real Examples
**Need to debug a crashing pod?**
```bash
./devops/orchestration/kubernetes-ops/scripts/pod-debug.sh my-pod
```
**Hardening a fresh Linux server?**
```bash
./security/hardening/linux-hardening/scripts/harden-system.sh --apply
```
**Setting up Vault from scratch?**
```bash
./security/secrets/hashicorp-vault/scripts/vault-init.sh
```
**Collecting evidence during an incident?**
```bash
./security/operations/incident-response/scripts/collect-evidence.sh INC-2024-001
```
---
## ๐ง How It Works
[Agent Skills](https://agentskills.io) is an open format for extending AI agent capabilities. Here's the flow:
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 1. DISCOVER 2. MATCH 3. ACTIVATE โ
โ โ
โ Agent scans โ User asks about โ Agent reads full โ
โ skill folders Kubernetes SKILL.md + runs โ
โ at startup debugging scripts as needed โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
Each `SKILL.md` has YAML frontmatter (name + description) that agents load at startup for matching, and markdown instructions that get loaded only when the skill is activated. This keeps context usage efficient.
๐ **Full spec:** [agentskills.io/specification](https://agentskills.io/specification)
---
## ๐ Quick Start
### 1. Download the Skills
```bash
# Clone to your skills directory
git clone https://github.com/bagelhole/DevOps-Security-Agent-Skills.git ~/.skills/devops-security
# Or add as a submodule to your project
git submodule add https://github.com/bagelhole/DevOps-Security-Agent-Skills.git .skills/devops-security
```
### 2. Integrate with Your Agent
**Filesystem-based agents** (Cursor, Claude with computer use, Cline, etc.) are the easiest โ the agent can read skills directly:
```bash
# Agent reads skill when needed
cat ~/.skills/devops-security/devops/orchestration/kubernetes-ops/SKILL.md
```
**Tool-based agents** need skills injected into the system prompt. Use the [skills-ref](https://github.com/agentskills/agentskills/tree/main/skills-ref) CLI:
```bash
# Generate XML for your agent's system prompt
skills-ref to-prompt ~/.skills/devops-security/devops/ci-cd/*
# Output:
# 
