Best agent skills for DevOps and SRE Engineers, page 112

APT 模拟与情报驱动红队方法论。基于已知 APT 组织的 TTP（MITRE ATT&CK）设计红队行动计划。当需要模拟特定威胁组织、设计高仿真攻击演练、或根据威胁情报制定攻击策略时使用

wgpsec/AboutSecurity

ArgoCD 后渗透方法论：Redis缓存投毒集群接管、SSO认证绕过、未授权API枚举、恶意Application部署、Webhook SSRF、默认凭据利用。

wgpsec/AboutSecurity

C2 Beacon 配置提取与分析。当捕获到 Cobalt Strike/Sliver/Havoc 等 C2 框架的 Beacon 样本、内存 dump、或网络流量时使用。提取 C2 地址、通信协议、Malleable Profile、Watermark 等关键情报。红队视角：了解蓝队如何从 Beacon 提取 IOC 以改进 C2 OPSEC

wgpsec/AboutSecurity

C2框架免杀方法论：分析 C2 源码、搜索检测规则(YARA/Sigma/Snort)、逐规则分析、修改源码绕过检测。当遇到 YARA/Sigma/Snort 规则触发告警、beacon/implant 被杀软检测到时使用。第一步：确认 implant/beacon 语言和架构；第二步：搜索对应检测规则并逐规则分析修改

wgpsec/AboutSecurity

IOC（失陷指标）分析与对抗方法论。蓝队视角：如何收集、富化、关联 IOC 进行威胁猎杀。红队视角：如何避免自身基础设施和工具产生可识别的 IOC，以及如何使 IOC 快速失效。当红队需要评估自身暴露面或规划 C2 基础设施时使用

wgpsec/AboutSecurity

Portainer 后渗透方法论：默认凭据认证突破、用户枚举时间差攻击、Docker API特权容器逃逸RCE、宿主机文件系统挂载。

wgpsec/AboutSecurity

sqlmap 高级用法完整参考。当确认存在 SQL 注入需要用 sqlmap 自动化利用时使用。覆盖 POST/Cookie/Header 注入、tamper 脚本选择、--technique 精确控制、二次注入、OS shell/文件读写、数据库提取优化

wgpsec/AboutSecurity

Terraform 状态文件与基础设施即代码攻击。当发现目标使用 Terraform 管理基础设施、找到 terraform.tfstate 文件、可访问远程 State 后端（S3/Consul/HTTP）、或可修改 Terraform 代码仓库时使用。覆盖 State 文件凭据提取、远程 State 后端利用、Provider 凭据窃取、Output 敏感值提取、tfvars…

wgpsec/AboutSecurity

威胁猎杀原理与规避方法论。理解蓝队如何主动猎杀（Hypothesis-driven / IOC-driven / Analytics-driven），红队如何设计行为使自己不被猎杀到。当需要评估自身操作是否可被威胁猎杀发现时使用

wgpsec/AboutSecurity

Canonical backlog loop step. An agent skill from probabl-ai/skills.

probabl-ai/skills

Progetta e installa un'infrastruttura di sicurezza a 4 livelli dove il cuore (dati e chiavi) è offline e staccato, lo scudo è invisibile agli scanner e il server reale è nascosto.

ccplugins/awesome-claude-code-plugins

Aggiunge alle repository GitHub dei siti workflow di sicurezza automatici - scansione dipendenze vulnerabili, ricerca di segreti/chiavi nel codice, analisi statica CodeQL e Dependabot.

ccplugins/awesome-claude-code-plugins

Apply rigorous supply chain security hygiene to software projects — audit dependencies, detect risks, minimize attack surface.

LearnPrompt/andrej-karpathy-skills

Verify and monitor running experiments for operational quality.

hashgraph-online/awesome-codex-plugins

A skill your agent uses when planning capacity, redundancy, graceful degradation, or recovery for systems that must keep working under stress — performance budgets, dependency failure handling…

hashgraph-online/awesome-codex-plugins

Plan and implement infrastructure, CI/CD, container, deployment, observability, and operational configuration changes with least privilege, staged validation, and rollback awareness.

hashgraph-online/awesome-codex-plugins

A skill your agent uses when connecting observed behavior, logs, metrics, request IDs, run IDs, screenshots, traces, external dependency results, or artifacts into a runtime evidence loop.

hashgraph-online/awesome-codex-plugins

A skill your agent uses when adding, changing, debugging, or reviewing Rust service error handling and observability, especially when separating domain errors from HTTP responses, adding…

hashgraph-online/awesome-codex-plugins

Assess whether experiment results are credible enough to influence product decisions.

hashgraph-online/awesome-codex-plugins

Establishes VPC peering connections between two VPCs for direct private network connectivity.

aws/agent-toolkit-for-aws

Diagnoses and resolves Amazon RDS for Oracle connectivity, authentication, networking, and driver troubleshooting.

aws/agent-toolkit-for-aws

Designs a resilience program: how to structure and standardize resilience policies across an organization, team, or portfolio (tiered policy model with availability/RTO/RPO targets and DR approach…

aws/agent-toolkit-for-aws

Provides AWS CDK TypeScript patterns for defining, validating, and deploying AWS infrastructure as code.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for Auto Scaling including EC2, ECS, and Lambda.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for CloudWatch monitoring, metrics, alarms, dashboards, logs, and observability.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for EC2 instances, Security Groups, IAM roles, and load balancers.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for ECS clusters, task definitions, services, container definitions, auto scaling, blue/green deployments, CodeDeploy integration, ALB integration, service…

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for ElastiCache Redis or Memcached infrastructure, including subnet groups, parameter groups, security controls, and cross-stack outputs.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for IAM roles, policies, managed policies, permission boundaries, and trust relationships.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for Amazon RDS databases.

giuseppe-trisciuoglio/developer-kit

Provides patterns to deploy ECS tasks and services with GitHub Actions CI/CD.

giuseppe-trisciuoglio/developer-kit

Provides AWS CloudFormation patterns for VPC foundations, including subnets, route tables, internet and NAT gateways, endpoints, and reusable outputs.

giuseppe-trisciuoglio/developer-kit

Provides comprehensive patterns for deploying Next.js applications to production.

giuseppe-trisciuoglio/developer-kit

Provides patterns and configurations for running WireMock as a standalone Docker container.

giuseppe-trisciuoglio/developer-kit

Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work.

microsoft/GitHub-Copilot-for-Azure

Azure VM/VMSS router. An agent skill from microsoft/GitHub-Copilot-for-Azure.

microsoft/GitHub-Copilot-for-Azure

Plan, deploy, operate, and troubleshoot Azure Local (formerly Azure Stack HCI): sizing and prerequisites, Arc registration, lifecycle updates, workloads (Azure Local VMs, AKS on Azure Local, images…

microsoft/GitHub-Copilot-for-Azure

时区安全检查，防止生产环境时区漂移导致的统计错乱。

doccker/cc-use-exp

Pre-deployment checklist for G5 submission. An agent skill from Stanshy/AgentHub.

Stanshy/AgentHub

Builds an Azure portal deep link to a specific blade/menu item for supported Microsoft.ContainerService, Microsoft.Kubernetes, and Microsoft.Compute resources using the aks-search-direct-mid…

microsoft/GitHub-Copilot-for-Azure

Datadog skills for AI agents. An agent skill from datadog-labs/agent-skills.

datadog-labs/agent-skills

Answer "who did what" security questions from Audit Trail — deletions, config changes, login activity, permission changes, actions from a specific user or IP.

datadog-labs/agent-skills

Monitor management - list, search, file-based create, and alerting best practices.

datadog-labs/agent-skills

Generate a live Single Step Instrumentation (SSI) onboarding confirmation report — verifies APM instrumentation is working end-to-end with deep links into the Datadog UI.

datadog-labs/agent-skills

Generate a live Single Step Instrumentation (SSI) onboarding confirmation report for Linux hosts — verifies APM instrumentation is working end-to-end with deep links into the Datadog UI.

datadog-labs/agent-skills

Watch a running Kobiton test run and narrate it to the user: read the org's live-remediation flag up front, poll the run until every execution is terminal, surface the live-remediation URL the…

jeremylongshore/tons-of-skills-marketplace

Manage and secure company devices with MDM solutions — enroll macOS, Windows, iOS, and Android devices, enforce security policies, and automate software deployment.

BagelHole/DevOps-Security-Agent-Skills

Security guardrails for Envilder (CLI, GitHub Action, SDKs, CDK, website).

macalbert/envilder