Best agent skills for DevOps and SRE Engineers, page 132

Java 源码序列化类漏洞审计。当在 Java 白盒审计中需要检测序列化/反序列化相关漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

PHP 源码序列化与模板类漏洞审计。当在 PHP 白盒审计中需要检测反序列化、XML 解析或模板注入漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

主动式全流程资产侦察。当需要对目标进行从零到漏洞发现的完整侦察、渗透测试的第一阶段、或需要全面了解目标攻击面时使用。覆盖子域名枚举→端口扫描→存活检测→指纹识别→POC 扫描的完整链条

wgpsec/AboutSecurity

Audit the conversation and the project for what could have gone better, then turn the generalizable lessons into committed improvements in the repo that hosts this skill.

forefy/.context

Audit codebase to uncover critical issues explicitly without false positives

forefy/.context

Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain…

xjli360/sealeap-amazon-skills

Calculate a per-SKU replenishment quantity from three inventory buckets (sellable FBA stock, inbound-transit stock, and domestic-warehouse stock) plus a recency-weighted sales-velocity estimate…

xjli360/sealeap-amazon-skills

Applies microservices for independent deployment and per-service scaling.

athola/claude-night-market

Installs egregore watchdog daemon via launchd or systemd for autonomous relaunching.

athola/claude-night-market

Registers external services with health checks, central config, and unified execution.

athola/claude-night-market

Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity.

athola/claude-night-market

Configures GitHub Actions CI/CD workflows for testing, linting, and deployment.

athola/claude-night-market

Deploy a WHOLE redesigned site to AEM Edge Delivery Services — the full-site, bulk sibling of deploy (which ships one page).

adobe/skills

Designs CI/CD pipelines, infrastructure, observability, and deployment strategy.

nWave-ai/nWave

Universal environment variable loader for AI agent environments.

oaustegard/claude-skills

A skill your agent uses when setting up or changing environment variable validation with ArkEnv, or when application code reads process.env / import.meta.env.

yamcodes/arkenv

Make Django deployment changes test-driven across Docker, production settings, Gunicorn, WhiteNoise/static files, environment variables, Ansible/server setup, staging smoke tests, and release checks.

hashgraph-online/awesome-codex-plugins

Optimize Django ORM query loading by fixing N+1 queries, duplicate related-object queries, over-fetching, serializer/template query loops, and inappropriate selectrelated, prefetchrelated, only, or…

hashgraph-online/awesome-codex-plugins

Design and review recoverable Go CLI errors, exit semantics, structured logging, debug modes, traces, profiles, redaction, and user-consented diagnostic bundles.

hashgraph-online/awesome-codex-plugins

Review application and infrastructure changes for exploitable security risks by tracing assets, trust boundaries, attacker-controlled input, authorization, sensitive data, and dangerous sinks.

hashgraph-online/awesome-codex-plugins

パフォーマンス観点のレビューエージェント. An agent skill from hashgraph-online/awesome-codex-plugins.

hashgraph-online/awesome-codex-plugins

セキュリティ観点の通常レビューエージェント. An agent skill from hashgraph-online/awesome-codex-plugins.

hashgraph-online/awesome-codex-plugins

Repository または subsystem を対象に、source-only で明示的なセキュリティ監査を行う entry skill。

hashgraph-online/awesome-codex-plugins

Plan and write SaaS documentation for managed services, continuous releases, provider/customer responsibility boundaries, UI/browser constraints, runbooks, support enablement, and release readiness.

hashgraph-online/awesome-codex-plugins

完成した差分・PR・検証証拠に残る Unknown（未確認の前提・調査されていない影響・ 不足している証拠）を横断合成する evidence-sufficiency のメタ観点。個別 defect の 検出は既存 skill へ委譲し、本 skill は「そのリスク種別を調査した証拠が残っているか」 の meta 評価のみを行う。通常は finding verification 後の…

hashgraph-online/awesome-codex-plugins

Manage Jenkins controllers with jk, including jobs, runs, logs, artifacts, credentials, nodes, queues, and plugins.

hashgraph-online/awesome-codex-plugins

Security review checklist for construction software systems.

datadrivenconstruction/DDC_Skills_for_AI_Agents_in_Construction

Magic Mouth is trigger → message. An agent skill from Hmbown/Wizards-of-the-Ghosts.

Hmbown/Wizards-of-the-Ghosts

Hands-on manual DX test pass of a feature or CLI command: read the real implementation and tests, hypothesize plausible user misunderstandings and misuse automated tests don't cover, build durable…

cloudposse/atmos

Build, sign, and package Android apps with Gradle before uploading to Google Play.

hanamizuki/solopreneur

Staged rollout orchestration and monitoring for Google Play releases.

hanamizuki/solopreneur

Trace when a bug was introduced, find the root cause commit, understand why it happened, and produce a structured post-mortem report.

hanamizuki/solopreneur

Run security scans and vulnerability checks. An agent skill from enuno/unifi-mcp-server.

enuno/unifi-mcp-server

Refresh a LOCAL MySQL database from a PRODUCTION dump, safely.

hmislk/hmis

Verify persistence.xml configuration before git push. An agent skill from hmislk/hmis.

hmislk/hmis

Record a pitfall or lesson learned in the postmortem log. An agent skill from Stanshy/AgentHub.

Stanshy/AgentHub

覆盖 Session、Task、Tool、Provider、Browser 的有界准入，跨 Session 公平性，SSE/ACP/Headless 输出背压，以及取消、关闭和进程树回收。

echoVic/blade-code

Audit npm dependencies for security vulnerabilities, outdated packages, and unused dependencies.

OneWave-AI/claude-skills

Debug Docker containers, fix Dockerfile issues, optimize images, and troubleshoot docker-compose.

OneWave-AI/claude-skills

Set up environment variables, .env files, and configuration management.

OneWave-AI/claude-skills

A skill your agent uses to run real static analysis over a diff or repo before shipping — Semgrep, CodeQL, secret scanning, dependency CVEs — and triage the findings into what must be fixed now…

OneWave-AI/claude-skills

Qualify and promote a pinned Bun fork build for a Linux OpenClaw service, including upstream sync, release proof, native workload admission, and rollback planning.

vincentkoc/dotskills

You need to add a new API key to the system, update an existing credential, check what secrets are configured for the org or a specific agent, onboard a new third-party tool that needs credentials…

grandamenium/cortextos

Framework protocol for responding to Claude Max API usage thresholds.

grandamenium/cortextos

Collect configured research sources, normalize signals, upsert them into SQLite, and log source health.

grandamenium/cortextos

Blameless post-mortem incident analysis with timeline, root cause, and action items.

neurofoo/agent-skills

Linux containers internals skill for namespaces, cgroups, and OCI.

mohitmishra786/low-level-dev-skills

Linux kernel security skill for LSM, hardening, and exploit mitigations.

mohitmishra786/low-level-dev-skills