Best agent skills for DevOps and SRE Engineers, page 10

Instruments code so production behavior is visible and diagnosable.

dzhalaevd/Donatello

Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks.

AgentSecOps/SecOpsAgentKit

Migrate a Talos Linux machine configuration from v1.13 (or earlier) v1alpha1 single-document format to the v1.14 multi-document config format introduced in Talos 1.14.

postfinance/topf

Preprocess task-based or resting-state fMRI data with fMRIPrep — a robust, BIDS-App preprocessing pipeline built on FSL, ANTs, FreeSurfer, AFNI, and Nilearn.

NeuroAIHub/BrainPilot

Automatically use for Levyra Android Intent, deep-link, PendingIntent, exported component, receiver, service, provider, URI-grant, FileProvider, caller-verification, or onNewIntent security work.

LUC4N3X/Levyra-deepsound

A skill your agent uses when the user asks to create a kubectl-status template for one or more Kubernetes resource kinds found in the current kubectl context.

bergerx/kubectl-status

Request a security expert assessment for code changes that touch child process spawning, file system access, configuration loading, or environment variable handling.

ktnyt/cclsp

Verify mql provider resource/field changes against real cloud infrastructure.

mondoohq/mql

GATES method validation for hunt-derived detections. An agent skill from Nebulock-Inc/agentic-threat-hunting-framework.

Nebulock-Inc/agentic-threat-hunting-framework

A skill your agent uses for AVM Terraform AzAPI resources, provider constraints, ARM schemas, parent IDs, resource types, retries, timeouts, response exports, replacement triggers, and…

Azure/terraform-azurerm-avm-ptn-alz

Full cluster health check for the home-ops Kubernetes cluster.

Diaoul/home-ops

Implement event missions (endeavours) into the mission designer project.

SapiensAnatis/Dawnshard

Automate the full application release flow for BrewMate, including committing local changes, bumping version, waiting for GitHub Actions release build, and pushing the in-repo cask update…

romankurnovskii/BrewMate

Run a local Liveblog development environment. An agent skill from liveblog/liveblog.

liveblog/liveblog

Publish the complete Spool CLI release train: synchronized versions, npm packages, the GitHub release, and the matching production web deployment.

paperboytm/spool

Runs the codecrucible CLI for LLM-backed security scans of a repository, checks scope and cost first with a dry run, and reads the SARIF results.

block/codecrucible

Maintains the DDNS project's GitHub Actions, Docker and Nuitka builds, packaging and release preparation without touching publishing credentials.

NewFuture/DDNS

Scaffold, build, and verify a neocarta source or format connector against the connector contract.

neo4j-labs/neocarta

Inspect local Aspire resource health, logs, traces, and browser telemetry.

exceptionless/Exceptionless

Run or debug the coastline rendering test (CoastlineRenderingTester / utilities.sh test-coastline-rendering) that compares locally rendered tiles against tile.osmand.net and reports water mask…

osmandapp/OsmAnd-tools

Create, generate, or scaffold GitHub Actions workflows, action.yml, or .github/workflows CI/CD pipelines.

akin-ozer/cc-devops-skills

Set up and verify a new Draw Things CPU proxy and Envoy server using the scripts in Scripts/ServerManagement/CPUScript.

drawthingsai/draw-things-community

Open a user-visible client/ change in a browser against a real Cloud Pipeline deployment.

epam/cloud-pipeline

Evaluate and score agent behavior against a golden reference.

agentevals-dev/agentevals

Deploy docker-compose projects to Kubernetes using Kappal. An agent skill from sandys/kappal.

sandys/kappal

Monitor and manage your Clawdbot agent fleet from within an agent.

Temaki-AI/clawd-control

A skill your agent uses when scanning code for security vulnerabilities.

tanviet12/vbsec

How an AI agent should safely drive the pass-cli password manager (this repo's binary).

reyamira/pass-cli

Deprecated placeholder. An agent skill from vasu-devs/JustHireMe.

vasu-devs/JustHireMe

WORKFLOW SKILL — Debug Azure production issues: Container Apps, Functions, App Service, AKS, VMs and messaging, with KQL log analysis.

jonathan-vella/apex

A skill your agent uses to migrate identified PostgreSQL tables to Timescale/TimescaleDB hypertables with optimal configuration and validation.

timescale/pg-aiguide

Audit an agent skill with Semia Skill Behavior Mapping. An agent skill from berabuddies/Semia.

berabuddies/Semia

Static analysis of UEFI/BIOS firmware dumps using Intel's chipsec framework.

BrownFineSecurity/iothackbot

构建并发布 NullPrivate 镜像到阿里云容器镜像服务，更新 k3s 工作负载并完成 rollout、镜像 digest、Pod、Service、Gateway/Ingress、HTTPS 与 DNS/DoH 验收。Use when: 推送 dev 镜像、发布 NullPrivate、更新 public3 Pod、部署 adguardprivate、回滚 public3、检查…

NullPrivate/NullPrivate

Audit and harden the Hedioum Pool Tunnel against nation-state DPI and censorship, as a filtering/anti-censorship expert would.

hedioum/Hedioum-Pool-Tunnel

Create or update a branch-scoped Coolify review environment with one command, and delete it with one command.

PacificStudio/openase

Fallback installer for milesdiffusion on a bare CUDA 12.9 Linux GPU box, reproducing the official radixark/milesdiffusion image's package versions and verifying them.

radixark/miles_diffusion

Portable credential management for AI agents using age encryption, session-scoped leases, auto-rotation, and killswitch.

joelhooks/agent-secrets

Enable, configure, and query Elasticsearch security audit logs.

aspectrr/deer

Rules for Operately schema migrations (app/priv/repo/migrations/) and data migrations (app/lib/operately/data/change.ex).

operately/operately

Build terminal user interfaces with Go and Bubbletea framework.

devantler-tech/ksail

The optional standing status report ("the weather"): compile open incidents, build health, merge-queue stats, and deploy lag into one always-current report page, and post to the channel only when a…

anthropics/oncall-kit

Propose an improved version of a prompt registered in a self-hosted AgentX (AgentX-trace-eval) instance, using real low-rated evaluation results as evidence, then publish it as a new version once…

AgentX-ai/AgentX-Trace-Eval

A skill your agent uses when changing metric CSV files, exporter-owned counters, Prometheus labels, or metric rendering.

NVIDIA/dcgm-exporter

Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports.

wiz-sec-public/SITF

Render app UI on the Gradle managed device and look at the result without spending a fortune in vision tokens.

parawanderer/OpenTagViewer

Use BEFORE running a full CompileIQ search. An agent skill from NVIDIA/CompileIQ.

NVIDIA/CompileIQ

QuickStart for getting the Karmada Dashboard running on an existing kind-based Karmada dev environment and exposing it for access.

karmada-io/dashboard