Infrastructure alert triage — dedup via YT search, deep PVE/K8s investigation, auto-escalation for recurring/flapping alerts, control plane deep dive for K8s controller nodes.

No licenceAuto-check: notesDevOps & Cloud

Install Infra Triage

skills CLI
$ npx skills add papadopouloskyriakos/agentic-chatops --skill infra-triage -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install papadopouloskyriakos/agentic-chatops infra-triage --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/papadopouloskyriakos/agentic-chatops.git skills-src && mkdir -p .claude/skills && cp -r skills-src/openclaw/skills/infra-triage .claude/skills/infra-triage && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
infra-triage
GitHub stars
107
Token cost
~714 tokens
SKILL.md length
341 words
Files
2
Skills in repo
17
Repo updated
First seen
Licence
None found

At a glance

Infrastructure alert triage — dedup via YT search, deep PVE/K8s investigation, auto-escalation for recurring/flapping alerts, control plane deep dive for K8s controller nodes.

  • Works in 5 steps: Issue Deduplication → Create/Reuse YouTrack Issue → Investigation → …
  • Tasks that involve Container orchestration
  • SKILL.md covers Usage, Environment Variables, What the Script Does and CRITICAL RULES
  • Runs Shell scripts from its folder; calls docker

What it does

Infra Triage is an agent skill from papadopouloskyriakos/agentic-chatops. Infrastructure alert triage — dedup via YT search, deep PVE/K8s investigation, auto-escalation for recurring/flapping alerts, control plane deep dive for K8s controller nodes.

Its SKILL.md is about 710 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `infra-triage.sh`).

It sits in DevOps & Cloud, covering Container orchestration and Security operations. It works with Kubernetes. The repository describes itself as: 3-tier agentic ChatOps (n8n + GPT-4o + Claude Code) implementing all 21 patterns from "Agentic Design Patterns" — solo operator managing 137 devices.

When your agent uses it

  • Tasks that involve Container orchestration
  • Tasks that involve Security operations

Example prompts

  • “/infra-triage”

Requirements

  • A Bash shell
  • Docker
  • Pre-approved tools (allowed-tools): Bash

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Issue Deduplication
  2. Create/Reuse YouTrack Issue
  3. Investigation
  4. Post Findings to YouTrack
  5. Escalation

What it can do on your machine

Read from SKILL.md and the folder at commit 473f057. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships script files (Shell), which the agent can run.

    Shell commands in SKILL.md call:

    • docker

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use docker, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Infra Triage loads about 714 tokens when it runs. Until then it costs about 47 tokens; SKILL.md has 341 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~47
When it runs · the whole SKILL.md, loaded when a task matches
~714

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 341 words (~714 tokens).

“When you see a message starting with [LibreNMS] ALERT in #infra-nl-prod or #infra-gr-prod, you MUST automatically run this full triage flow using the exec tool. Do NOT ask questions — just execute.”

— opening of SKILL.md by papadopouloskyriakos
name
infra-triage
allowed-tools
Bash
user-invocable
true

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in openclaw/skills/infra-triage of papadopouloskyriakos/agentic-chatops.

  • SKILL.md
  • infra-triage.sh

Open the folder on GitHubat commit 473f057

Compare with similar skills

Infra Triage next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Infra Triage compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Infra Triage this skillpapadopouloskyriakos/agentic-chatops107—~714Automated safety check: NotesNone
Detecting Container Escape Attemptsmukul975/Anthropic-Cybersecurity-Skills34k—~2.9kAutomated safety check: PassApache-2.0
Analyzing Kubernetes Audit Logsmukul975/Anthropic-Cybersecurity-Skills34k—~654Automated safety check: PassApache-2.0
Implementing Ebpf Security Monitoringmukul975/Anthropic-Cybersecurity-Skills34k—~2.4kAutomated safety check: NotesApache-2.0
Detecting Container Runtime Threats With Falcomukul975/Anthropic-Cybersecurity-Skills34k—~3kAutomated safety check: WarnApache-2.0
KubeShark for KubernetesLukasNiessen/kubernetes-skill446—~1.2kAutomated safety check: PassMIT

Similar skills

  • Detecting Container Escape Attempts

    mukul975/Anthropic-Cybersecurity-Skills

    Detects container escape at runtime across tooling - namespace manipulation, capability abuse, kernel exploits, sensitive host mounts, and anomalous syscalls - and explains which signals matter…

    34k GitHub stars~2.9k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check passed
  • Analyzing Kubernetes Audit Logs

    mukul975/Anthropic-Cybersecurity-Skills

    Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules…

    34k GitHub stars~654 tokensUpdated 1 mo ago
    DevOps & CloudAuto-check passed
  • Implementing Ebpf Security Monitoring

    mukul975/Anthropic-Cybersecurity-Skills

    Implements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement.

    34k GitHub stars~2.4k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check: notes
  • Detecting Container Runtime Threats With Falco

    mukul975/Anthropic-Cybersecurity-Skills

    Deploys and operates Falco with the modern eBPF driver in Kubernetes and Docker, covering driver selection, Helm installation, output channels, and the built-in ruleset that detects container…

    34k GitHub stars~3k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check: warnings
  • KubeShark for Kubernetes

    LukasNiessen/kubernetes-skill

    Keeps Kubernetes manifests, Helm charts and policies grounded by diagnosing six failure modes, such as insecure defaults and API drift, and loading only matching references.

    446 GitHub stars~1.2k tokensUpdated 28 days ago
    DevOps & CloudAuto-check passed
  • Alibabacloud Ecs Sec Userspace

    aliyun/alibabacloud-ecs-troubleshoot-skills

    Linux 用户态安全入侵检测与取证工具,专为 AI Agent 设计。自动判断服务器是否被入侵, 提供完整证据链和可执行修复建议。51 个安全分析器覆盖进程/网络/认证/持久化/Rootkit/ 恶意软件/内存取证/容器逃逸等 12 类检测维度,10 个数据采集器全面采集系统状态, 映射 103+ MITRE ATT&CK 技术,支持 standalone/docker/k8s 三种部署模式。

    148 GitHub stars~2.6k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check: notes

More from papadopouloskyriakos/agentic-chatops

All 17 skills in this repo
  • Escalate To Claude

    papadopouloskyriakos/agentic-chatops

    Escalate a YouTrack issue to Claude Code (Tier 2) for CODE IMPLEMENTATION ONLY.

    107 GitHub stars~672 tokensUpdated 4 days ago
    Auto-check: notes
  • Netbox Lookup

    papadopouloskyriakos/agentic-chatops

    Look up infrastructure devices, VMs, IPs, VLANs, and interfaces from NetBox CMDB.

    107 GitHub stars~618 tokensUpdated 4 days ago
    Auto-check: notes
  • Youtrack Lookup

    papadopouloskyriakos/agentic-chatops

    Look up YouTrack issues by ID or list open issues. An agent skill from papadopouloskyriakos/agentic-chatops.

    107 GitHub stars~550 tokensUpdated 4 days ago
    Auto-check: notes
  • Playbook Lookup

    papadopouloskyriakos/agentic-chatops

    Query past incident resolutions from the knowledge base. An agent skill from papadopouloskyriakos/agentic-chatops.

    107 GitHub stars~363 tokensUpdated 4 days ago
    Auto-check: notes
  • Bootstrap

    papadopouloskyriakos/agentic-chatops

    Meta-skill chaining /specify → /constitute → /plan → /tasks → spec-validation → dispatch-ready.

    107 GitHub stars~837 tokensUpdated 4 days ago
    Auto-check: notes
  • Cross Tier Review

    papadopouloskyriakos/agentic-chatops

    Cross-tier review protocol — chain of verification for REVIEW REQUEST messages from Claude Code (Tier 2).

    107 GitHub stars~691 tokensUpdated 4 days ago
    Auto-check: notes

Works with

Questions about Infra Triage

What does Infra Triage do?

Infrastructure alert triage — dedup via YT search, deep PVE/K8s investigation, auto-escalation for recurring/flapping alerts, control plane deep dive for K8s controller nodes. Infra Triage is an agent skill from papadopouloskyriakos/agentic-chatops. Infrastructure alert triage — dedup via YT search, deep PVE/K8s investigation, auto-escalation for recurring/flapping alerts, control plane deep dive for K8s controller nodes.

When should I use Infra Triage?

Infra Triage fits situations like: tasks that involve Container orchestration; tasks that involve Security operations.

How do I install Infra Triage in Claude Code?

Run `npx skills add papadopouloskyriakos/agentic-chatops --skill infra-triage -a claude-code`. Or copy the skill folder (openclaw/skills/infra-triage in papadopouloskyriakos/agentic-chatops) into .claude/skills/infra-triage in your project. Claude Code loads it when a task matches its description.

How do I install Infra Triage in Codex?

Run `npx skills add papadopouloskyriakos/agentic-chatops --skill infra-triage -a codex`. Or copy the skill folder (openclaw/skills/infra-triage in papadopouloskyriakos/agentic-chatops) into .agents/skills/infra-triage in your project. Codex loads it when a task matches its description.

Can I use Infra Triage in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add papadopouloskyriakos/agentic-chatops --skill infra-triage -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/infra-triage, .gemini/skills/infra-triage, .github/skills/infra-triage and .opencode/skills/infra-triage in your project.

What does Infra Triage need to run?

Going by SKILL.md and its folder, Infra Triage needs a shell for the scripts in its folder and the command-line tools its instructions call (docker). Our summary lists: A Bash shell; Docker. Its frontmatter pre-approves these tools: Bash.

Does Infra Triage access the network?

SKILL.md contains no URLs. Its commands use docker, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Infra Triage safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Infra Triage use?

No licence was found for Infra Triage or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Infra Triage use?

About 714 tokens (SKILL.md is roughly 2.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Infra Triage?

Skills that share tags, products or a category with Infra Triage: Detecting Container Escape Attempts (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Analyzing Kubernetes Audit Logs (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Implementing Ebpf Security Monitoring (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Detecting Container Runtime Threats With Falco (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Infra Triage?

papadopouloskyriakos (a GitHub user) maintains it in papadopouloskyriakos/agentic-chatops, which has 107 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 6, 2026.

Source: papadopouloskyriakos/agentic-chatops on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.