DevOps Agent Skills for CI, CD and Security

Runs pre-deployment validation for Azure readiness, checking configuration, Bicep/Terraform infrastructure, RBAC role assignments, and managed identity permissions.

by microsoft/azure-skills

• CD
• Infrastructure

Plans, creates, and configures production-ready Azure Kubernetes Service clusters, covering SKU selection, networking, security, autoscaling, upgrades, and observability.

by microsoft/azure-skills

• CD
• Infrastructure
• Security

Needs (stated): Node.js

Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run on AKS. DO NOT USE FOR: creating or provisioning an AKS cluster (use azure-kubernetes), assessing migration to AKS Automatic (use azure-kubernetes-automatic-readiness), or deploying to non-AKS targets like Web Apps, Container Apps, or Functions.

by microsoft/azure-skills

• CD
• Infrastructure

Orchestrates bringing an app to Azure end-to-end: analyzes the app, selects Azure services, scaffolds infrastructure code, estimates cost, and deploys.

by microsoft/azure-skills

• CD
• Infrastructure

Runs Azure compliance and security audits using azqr and Key Vault expiration checks, covering best-practice assessment, policy validation, and security posture.

by microsoft/azure-skills

• Security

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

by microsoft/azure-skills

• CD
• Infrastructure

>- Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecure bindings, audit tools), Binary Authorization, enabling Shielded Nodes, GKE Sandbox cluster enablement, GKE IAM roles, and cross-service authentication IAM patterns. Use when securing cluster control planes, hardening GKE RBAC, enabling Shielded Nodes, enabling GKE Sandbox runtime, enabling cluster-wide security add-ons, or managing GKE IAM roles. Don't use for workload-level security (Workload Identity, SecretProviderClass, PSS, NetPol, gVisor pod runtimeClassName; use gke-workload-security instead).

by google/skills

• Infrastructure
• Security

>- Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).

by google/skills

• Infrastructure
• Security

>- Investigates Google Cloud networking issues by analyzing logs, metrics, and diagnostics. Use when investigating VPC Flow Logs (including cost estimation), NAT, firewall, or threat logs, querying latency and throughput metrics, or running Connectivity Tests for path diagnostics. Don't use for generic VM management or non-observability tasks.

by google/skills

• Infrastructure
• Observability

Instruments code so production behavior is visible and diagnosable. Use when adding logging, metrics, tracing, or alerting. Use when shipping any feature that runs in production and you need evidence it works. Use when production issues are reported but you can't tell what happened from the available data.

by addyosmani/agent-skills

• CD
• Observability
• Incident & recovery

Go observability guidance covering slog structured logging, Prometheus metrics, OpenTelemetry tracing, continuous profiling, RUM, alerting, and Grafana dashboards.

by samber/cc-skills-golang

• Observability

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

by openai/skills

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

by openai/skills

• Security
• Observability

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package-manager audit findings, or assessing supply-chain risk in a new package. Use when personal data or privacy compliance (GDPR, CCPA) is involved.

by addyosmani/agent-skills

• CD
• Security

Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.

by openai/skills

• CD
• Infrastructure
• Security

Helps discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security, then routes to product-specific skills and docs.

by cloudflare/skills

• CD

Helps write and validate EAS workflow YAML files for Expo projects, covering CI/CD build pipelines, triggers, jobs, and deployment automation.

by expo/skills

Configures and troubleshoots Turborepo repositories, covering turbo.json task pipelines, caching, Remote Cache, filtering, and CI workflows.

by vercel/turborepo

• CD

Needs (stated): Node.js

Handles Supabase tasks including database, auth, Edge Functions, storage, migrations, security audits, and debugging via CLI or MCP.

by supabase/agent-skills

• Observability

Postgres best practices for schema design, migrations, RLS, indexes, connection management, and query performance, maintained by Supabase.

by supabase/agent-skills

• Observability

Queries Azure costs, forecasts spending, and optimizes to reduce waste, including orphaned resources and rightsizing recommendations.

by microsoft/azure-skills

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, API permissions, and MSAL integration for Azure applications.

by microsoft/azure-skills

• Infrastructure
• Security

Evaluates a repository for build health, dependencies, stack compatibility, and Azure deployment feasibility, producing per-component PASS/WARN/FAIL verdicts.

by microsoft/azure-skills

• CD

Queries health metrics for published EAS Updates, including crash rates, launch counts, unique users, payload size, and embedded-vs-OTA user splits.

by expo/skills

• CD
• Observability

Converts installed Firebase Extensions into standalone Cloud Functions codebases or npm packages, upgrading V1 triggers to V2 with declarative IAM.

by firebase/agent-skills

• CD
• Infrastructure

Implements JavaScript/TypeScript testing strategies with Jest, Vitest, and Testing Library, covering unit, integration, and end-to-end tests with mocking and TDD.

by wshobson/agents

Use when writing Playwright tests, fixing flaky tests, debugging failures, implementing Page Object Model, configuring CI/CD, optimizing performance, mocking APIs, handling authentication or OAuth, testing accessibility (axe-core), file uploads/downloads, date/time mocking, WebSockets, geolocation, permissions, multi-tab/popup flows, mobile/responsive layouts, touch gestures, GraphQL, error handling, offline mode, multi-user collaboration, third-party services (payments, email verification), console error monitoring, global setup/teardown, test annotations (skip, fixme, slow), test tags (@smok

by currents-dev/playwright-best-practices-skill

Run Playwright tests at scale using Azure Playwright Workspaces (formerly Microsoft Playwright Testing). Use when scaling browser tests across cloud-hosted browsers, integrating with CI/CD pipelines, or publishing test results to the Azure portal.

by microsoft/skills

• Infrastructure

| Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification. Triggers: "Key Vault keys", "KeyClient", "CryptographyClient", "RSA key", "EC key", "encrypt decrypt .NET", "key rotation", "HSM".

by microsoft/skills

Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.

by microsoft/skills

Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.

by microsoft/skills

• Security

>- Designs, deploys, and secures Google Cloud Agent Gateway solutions. Use when the user needs to configure multi-agent security, ingress (CLIENT_TO_AGENT), or egress (AGENT_TO_ANYWHERE) patterns involving Model Armor, IAP, and Agent Registry. Don't use for general Cloud Load Balancing or basic VPC setup not related to Agent Gateways.

by google/skills

• CD
• Infrastructure

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, create agent, update agent, add tool to agent, invoke agent, agent.yaml, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, prompt optimizer, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure-prepare).

by microsoft/azure-skills

• CD
• Observability

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.

by openai/skills

• Security

by google/agents-cli

• CD
• Infrastructure
• Observability

Needs (stated): Credentials

by firebase/agent-skills

• CD
• Infrastructure

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

by mattpocock/skills

• Security
• Observability

Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a…

by better-auth/skills

• Security

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus `gosec` SAST, race detection, and fuzz testing.…

by samber/cc-skills-golang

• CI
• Security
• Observability

Deploys a self-hosted funnel builder to Cloudflare Workers or Docker, wiring payments, catalog, and conversion tracking, and driving it over MCP.

by autonnel/autonnel-skills

• CD

Use this skill whenever someone needs a backend, or a task touches InsForge backend or cloud infrastructure through the InsForge CLI: projects, SQL, migrations, RLS policies, functions, storage, backups, deployments, compute, secrets, config, schedules, logs, diagnostics, advisor scans and suppressions, import/export, AI/OpenRouter setup and usage overview, Stripe/Razorpay payments, Apify web scraping / data sources, PostHog product analytics, backend branches, organization membership (invite, leave, delete), agent memory (remember/recall project facts and decisions), reporting InsForge-side bugs or doc discrepancies (feedback), or CLI docs. For app code with InsForge or @insforge/sdk, use the insforge app-integration skill instead.

by insforge/insforge-skills

• Infrastructure
• Security
• Observability

Use when the user wants to provision infrastructure or third-party services using Stripe Projects. Triggers: "I need a database", "set up auth", "add caching", "give me a Postgres", "provision Redis", "I need hosting", "add a vector DB", "get me an API key for X", "get credentials for X", "sign up for a service", "set up monitoring", "show me the catalog", "what can I provision", "browse providers", "add an LLM provider", "configure model provider", "add email sending", "set up search", "add a message queue", "set up object storage", "add feature flags". Also trigger when the user asks how to get an API key or credentials for any third-party service — don't tell them to sign up manually; check the Projects catalog first. Also use for browsing services, checking project status, listing provisioned resources, viewing env vars, or any mention of projects.dev or adding/provisioning/connecting a cloud service.

by stripe/ai

• Infrastructure