Eks Best Practices
aws-samples/appmod-blueprints
Advisory guidance for Amazon EKS architecture and configuration decisions — compute strategy, networking, security, reliability, cost, autoscaling, observability, multi-tenancy, and upgrade planning.
Autonomous DevSecOps & FinOps Guardrails. An agent skill from sickn33/agentic-awesome-skills.
Install Aegisops AI
$ npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install sickn33/agentic-awesome-skills aegisops-ai --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/aegisops-ai .claude/skills/aegisops-ai && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "aegisops-ai" agent skill from https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-ai into .claude/skills/aegisops-ai/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aegisops-ai", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-aiType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install sickn33/agentic-awesome-skills aegisops-ai --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/aegisops-ai .agents/skills/aegisops-ai && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "aegisops-ai" agent skill from https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-ai into .agents/skills/aegisops-ai/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aegisops-ai", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install sickn33/agentic-awesome-skills aegisops-ai --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/aegisops-ai .cursor/skills/aegisops-ai && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "aegisops-ai" agent skill from https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-ai into .cursor/skills/aegisops-ai/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aegisops-ai", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/sickn33/agentic-awesome-skills.git --path skills/aegisops-ai--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install sickn33/agentic-awesome-skills aegisops-ai --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/aegisops-ai .gemini/skills/aegisops-ai && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "aegisops-ai" agent skill from https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-ai into .gemini/skills/aegisops-ai/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aegisops-ai", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install sickn33/agentic-awesome-skills aegisops-aiInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/aegisops-ai .github/skills/aegisops-ai && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "aegisops-ai" agent skill from https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-ai into .github/skills/aegisops-ai/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aegisops-ai", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install sickn33/agentic-awesome-skills aegisops-ai --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/aegisops-ai .opencode/skills/aegisops-ai && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "aegisops-ai" agent skill from https://github.com/sickn33/agentic-awesome-skills/tree/main/skills/aegisops-ai into .opencode/skills/aegisops-ai/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aegisops-ai", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
aegisops-ai- GitHub stars
- 47k
- Used in
- 2 other repos
- Token cost
- ~1.3k tokens
- SKILL.md length
- 579 words
- Files
- 1
- Skills in repo
- 1,497
- Repo updated
- First seen
- Licence
- MIT
At a glance
Autonomous DevSecOps & FinOps Guardrails. An agent skill from sickn33/agentic-awesome-skills.
- Works in 5 steps: 🐧 Kernel Patch Reviewer… → 💰 FinOps & Cloud Auditor… → ☸️ K8s Policy Hardener… → …
- Tasks that involve Container orchestration
- SKILL.md covers Goal, When to Use, When Not to Use and 🤖 Generative AI Integration, plus 8 more sections
- Calls terraform, python3 and git; reaches github.com; needs GEMINI_API_KEY
What it does
Aegisops AI is an agent skill from sickn33/agentic-awesome-skills. Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and K8s compliance.
Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in DevOps & Cloud, covering Container orchestration, Infrastructure as code and Cloud cost optimization. It works with Kubernetes, Terraform and Linux. The repository describes itself as: AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 2,400+ agentic skills. Includes… The licence is MIT.
When your agent uses it
- Tasks that involve Container orchestration
- Tasks that involve Infrastructure as code
- Tasks that involve Cloud cost optimization
Example prompts
- “/aegisops-ai”
Requirements
- Python 3
- A credential in GEMINI_API_KEY
Workflow steps
5 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit b84d35a. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
terraformpython3gitpipkubectl
From the folder's file list and the shell code blocks in SKILL.md.
Network
Hosts in commands or code, which the agent is likely to contact:
github.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
GEMINI_API_KEY
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Aegisops AI loads about 1.3k tokens when it runs. Until then it costs about 39 tokens; SKILL.md has 579 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteMentions a .env fileSKILL.md:87
Create a `.env` file in the root directory to securely - NoteMentions a .env fileSKILL.md:91
GEMINI_API_KEY=%s\n' "$GEMINI_API_KEY" > .env
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from sickn33/agentic-awesome-skills at commit b84d35a, republished under its MIT licence (© sickn33). 579 words, ~1,331 tokens.
Download SKILL.mdSave it as
.claude/skills/aegisops-ai/SKILL.md (or your agent's skills folder).- name
- aegisops-ai
- description
- Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and K8s compliance.
- risk
- safe
- source
- community
- author
- Champbreed
- date_added
- 2026-03-24
/aegisops-ai — Autonomous Governance Orchestrator
AegisOps-AI is a professional-grade "Living Pipeline" that integrates advanced AI reasoning directly into the SDLC. It acts as an intelligent gatekeeper for systems-level security, cloud infrastructure costs, and Kubernetes compliance.
Goal
To automate high-stakes security and financial audits by:
- Identifying logic-based vulnerabilities (UAF, Stale State) in Linux Kernel patches.
- Detecting massive "Silent Disaster" cost drifts in Terraform plans.
- Translating natural language security intent into hardened K8s manifests.
When to Use
- Kernel Patch Review: Auditing raw C-based Git diffs for memory safety.
- Pre-Apply IaC Audit: Analyzing
terraform planoutputs to prevent bill spikes. - Cluster Hardening: Generating "Least Privilege" securityContexts for deployments.
- CI/CD Quality Gating: Blocking non-compliant merges via GitHub Actions.
When Not to Use
- Web App Logic: Do not use for standard web vulnerabilities (XSS, SQLi); use dedicated SAST scanners.
- Non-C Memory Analysis: The patch analyzer is optimized for C-logic; avoid using it for high-level languages like Python or JS.
- Direct Resource Mutation: This is an auditor, not a deployment tool. It does not execute
terraform applyorkubectl apply. - Post-Mortem Analysis: For analyzing why a previous AI session failed, use
/analyze-projectinstead.
🤖 Generative AI Integration
AegisOps-AI leverages the Google GenAI SDK to implement a "Reasoning Path" for autonomous security and financial audits:
- Neural Patch Analysis: Performs semantic code reviews of Linux Kernel patches, moving beyond simple pattern matching to understand complex memory state logic.
- Intelligent Cost Synthesis: Processes raw Terraform plan diffs through a financial reasoning model to detect high-risk resource escalations and "silent" fiscal drifts.
- Natural Language Policy Mapping: Translates human security intent into syntactically correct, hardened Kubernetes
securityContextconfigurations.
🧭 Core Modules
1. 🐧 Kernel Patch Reviewer (patch_analyzer.py)
- Problem: Manual review of Linux Kernel memory safety is time-consuming and prone to human error.
- Solution: Gemini 3 performs a "Deep Reasoning" audit on raw Git diffs to detect critical memory corruption vulnerabilities (UAF, Stale State) in seconds.
- Key Output:
analysis_results.json
2. 💰 FinOps & Cloud Auditor (cost_auditor.py)
- Problem: Infrastructure-as-Code (IaC) changes can lead to accidental "Silent Disasters" and massive cloud bill spikes.
- Solution: Analyzes
terraform planoutput to identify cost anomalies—such as accidental upgrades fromt3.microto high-performance GPU instances. - Key Output:
infrastructure_audit_report.json
Show full SKILL.md (222 more words)Show less
3. ☸️ K8s Policy Hardener (k8s_policy_generator.py)
- Problem: Implementing "Least Privilege" security contexts in Kubernetes is complex and often neglected.
- Solution: Translates natural language security requirements into production-ready, hardened YAML manifests (Read-only root FS, Non-root enforcement, etc.).
- Key Output:
hardened_deployment.yaml
🛠️ Setup & Environment
1. Clone the Repository
git clone https://github.com/Champbreed/AegisOps-AI.git
cd AegisOps-AI2. Setup
python3 -m venv venv
source venv/bin/activate
pip install google-genai python-dotenv3. API Configuration
Create a .env file in the root directory to securely
store your credentials:
printf 'GEMINI_API_KEY=%s\n' "$GEMINI_API_KEY" > .env🏁 Operational Dashboard
To execute the full suite of agents in sequence and generate all security reports:
python3 main.pyPattern: Over-Privileged Container
- Indicators:
allowPrivilegeEscalation: trueor root user execution. - Investigation: Pass security intent (e.g., "non-root only") to the K8s Hardener module.
💡 Best Practices
- Context is King: Provide at least 5 lines of context around Git diffs for more accurate neural reasoning.
- Continuous Gating: Run the FinOps auditor before every infrastructure change, not after.
- Manual Sign-off: Use AI findings as a high-fidelity signal, but maintain human-in-the-loop for kernel-level merges.
🔒 Security & Safety Notes
- Key Management: Use CI/CD secrets for
GEMINI_API_KEYin production. - Least Privilege: Test "Hardened" manifests in staging first to ensure no functional regressions.
Links
- Repository: https://github.com/Champbreed/AegisOps-AI
- Documentation: https://github.com/Champbreed/AegisOps-AI#readme
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
© sickn33, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/aegisops-ai of sickn33/agentic-awesome-skills.
Open the folder on GitHubat commit b84d35a
Used in 2 other repositories
We found 11 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 2 other GitHub owners. This page covers the copy in sickn33/agentic-awesome-skills, which our catalogue first saw on October 7, 2026.
Compare with similar skills
Aegisops AI next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Aegisops AI this skillsickn33/agentic-awesome-skills | 47k | 2 repos | ~1.3k | Automated safety check: Notes | MIT | |
| Eks Best Practicesaws-samples/appmod-blueprints | 115 | — | ~5k | Automated safety check: Pass | MIT-0 | |
| Asdfjjmartres/opencode | 133 | — | ~2.1k | Automated safety check: Notes | MIT | |
| Supercheck Infrastructure Deploymentsupercheck-io/supercheck | 215 | — | ~1.4k | Automated safety check: Notes | AGPL-3.0 | |
| Cloud Devopsdavila7/claude-code-templates | 33k | 4 repos | ~1.4k | Automated safety check: Pass | MIT | |
| Infrastructuremicrosoft/physical-ai-toolchain | 126 | — | ~1.6k | Automated safety check: Pass | MIT |
Similar skills
- Official
Asdf
jjmartres/opencode
A skill your agent uses whenever the user wants to install, configure, or use asdf (asdf-vm), the universal version manager.
Supercheck Infrastructure Deployment
supercheck-io/supercheck
Work on Supercheck Docker Compose, K3s, Kubernetes manifests, gVisor, OpenTofu/Hetzner, secrets, external services, autoscaling, backups, disaster recovery, DNS/TLS, or production deployment.
Cloud Devops
davila7/claude-code-templates
Cloud infrastructure and DevOps workflow covering AWS, Azure, GCP, Kubernetes, Terraform, CI/CD, monitoring, and cloud-native development.
- Official
Infrastructure
microsoft/physical-ai-toolchain
Deploy and manage Azure infrastructure for the Physical AI Toolchain including Terraform IaC, Kubernetes setup, GPU configuration, and network topology
- Official
Oci
oracle/skills
Oracle Cloud Infrastructure guidance for designing, operating, and troubleshooting OCI services, including OCI Kubernetes Engine (OKE), OCI Internet of Things Platform, OCI Functions deployment and…
More from sickn33/agentic-awesome-skills
All 1,497 skills in this repoLiuguang Banlan UI
sickn33/agentic-awesome-skills
Implements an interface in one of two named color modes, iridescent white or colorful black, from a parameterized starter that reports measured color intensity.
User Thoughts Memory
sickn33/agentic-awesome-skills
Saves a user's project decisions, rules and preferences into a project-local mdbase so later sessions and other agents can recover the intent.
Using LWC Memory and Graphs
sickn33/agentic-awesome-skills
Keeps project decisions, research and verified results available across coding-agent sessions through LWC memory, a document Wiki graph and a CodeGraph code index.
Find Complementary Founders
sickn33/agentic-awesome-skills
Guides an agent through assessing its own owner for cofounder fit, publishing an approved profile, and ranking complementary profiles other agents published for their owners.
Whatsapp Cloud API
sickn33/agentic-awesome-skills
Integracao com WhatsApp Business Cloud API (Meta). An agent skill from sickn33/agentic-awesome-skills.
Cline Pilot
sickn33/agentic-awesome-skills
Acts as a proxy for the Cline CLI, dispatching coding tasks one at a time, monitoring runs by hard evidence, relaying decisions to you and learning per-project preferences.
Related
Works with
Categories
Questions about Aegisops AI
What does Aegisops AI do?
Autonomous DevSecOps & FinOps Guardrails. An agent skill from sickn33/agentic-awesome-skills. Aegisops AI is an agent skill from sickn33/agentic-awesome-skills. Autonomous DevSecOps & FinOps Guardrails.
When should I use Aegisops AI?
Aegisops AI fits situations like: tasks that involve Container orchestration; tasks that involve Infrastructure as code; tasks that involve Cloud cost optimization.
How do I install Aegisops AI in Claude Code?
Run `npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a claude-code`. Or copy the skill folder (skills/aegisops-ai in sickn33/agentic-awesome-skills) into .claude/skills/aegisops-ai in your project. Claude Code loads it when a task matches its description.
How do I install Aegisops AI in Codex?
Run `npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a codex`. Or copy the skill folder (skills/aegisops-ai in sickn33/agentic-awesome-skills) into .agents/skills/aegisops-ai in your project. Codex loads it when a task matches its description.
Can I use Aegisops AI in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add sickn33/agentic-awesome-skills --skill aegisops-ai -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/aegisops-ai, .gemini/skills/aegisops-ai, .github/skills/aegisops-ai and .opencode/skills/aegisops-ai in your project.
What does Aegisops AI need to run?
Going by SKILL.md and its folder, Aegisops AI needs the command-line tools its instructions call (terraform, python3, git, pip and kubectl) and credentials named GEMINI_API_KEY. Our summary lists: Python 3; A credential in GEMINI_API_KEY.
Does Aegisops AI access the network?
SKILL.md names 1 domain. In commands or code: github.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Is Aegisops AI safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Aegisops AI use?
Aegisops AI is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Aegisops AI use?
About 1.3k tokens (SKILL.md is roughly 5.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Aegisops AI?
Skills that share tags, products or a category with Aegisops AI: Eks Best Practices (aws-samples/appmod-blueprints, 115 stars), Asdf (jjmartres/opencode, 133 stars), Supercheck Infrastructure Deployment (supercheck-io/supercheck, 215 stars) and Cloud Devops (davila7/claude-code-templates, 33k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Aegisops AI?
sickn33 (a GitHub user) maintains it in sickn33/agentic-awesome-skills, which has 47,405 GitHub stars. The repository holds 1,497 skills in this directory. The repository was last updated on October 9, 2026.
Source: sickn33/agentic-awesome-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.