Topic · DevOps & Cloud
Best infrastructure as code skills for Claude Code, Codex and other agents.
- skills
- 351
- official
- 94
Infrastructure as code skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Guidance for writing and testing Terraform and OpenTofu code: module structure, naming, test approaches, CI/CD workflows, state handling and security scanning. | agentscope-ai/ | 35k | 6 repos | ~4.2k | Automated safety check: Pass | Apache-2.0 | 7 days ago |
| 2 | Create agent skills for Microsoft technologies using official documentation. | MicrosoftDocs/ | 1.9k | 3 repos | ~2.1k | Automated safety check: Pass | CC-BY-4.0 | 8 days ago |
| 3 | A skill your agent uses when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops - diagnoses failure mode (identity churn, secrets, blast radius, CI drift… | antonbabenko/ | 2.4k | 1 repo | ~5.1k | Automated safety check: Pass | Apache-2.0 | 3 mo ago |
| 4 | AWS Cloud Development Kit (CDK) expert for building cloud infrastructure with TypeScript/Python. | zxkane/ | 367 | 2 repos | ~2.5k | Automated safety check: Pass | MIT | 3 mo ago |
| 5 | Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup… | maslennikov-ig/ | 259 | 6 repos | ~1.1k | Automated safety check: Notes | Unknown | 7 mo ago |
| 6 | Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), feature flags (Flagship), networking (Tunnel, Spectrum), security (WAF… | hodgef/ | 127 | 7 repos | ~2.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 7 | Draw cloud architecture diagrams for AWS, Azure or GCP with the official provider icon sets, using TerraVision. | patrickchugh/ | 1.6k | — | ~5.6k | Automated safety check: Notes | AGPL-3.0-only | yesterday |
| 8 | Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), security (WAF, DDoS), and… | dmmulroy/ | 728 | — | ~1.6k | Automated safety check: Pass | MIT | 8 mo ago |
| 9 | Designs Azure infrastructure from a natural-language description, or diagrams an existing resource group, then refines the design through conversation and deploys it with Bicep. | github/ | 40k | 1 repo | ~1.9k | Automated safety check: Pass | MIT | today |
| 10 | Add a new AWS event source attribute (e.g., Kinesis, Kafka, MQ) to the Lambda .NET Annotations framework, including the attribute class, source generator integration, CloudFormation writer, unit… | aws/ | 1.7k | — | ~3k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 11 | 11.Terrashark Prevent Terraform/OpenTofu hallucinations by diagnosing and fixing failure modes: identity churn, secret exposure, blast-radius mistakes, CI drift, and compliance gate gaps. | LukasNiessen/ | 715 | — | ~843 | Automated safety check: Pass | MIT | 5 days ago |
| 12 | 12.Wdio Testing Write, run, and debug WebDriverIO (WDIO) UI tests for the Ansible VS Code extension. | ansible/ | 486 | — | ~2.2k | Automated safety check: Pass | MIT | today |
| 13 | Answers AWS architecture, security and service-selection questions by searching AWS documentation through MCP tools first, then adapting advice to your stack and team. | tech-leads-club/ | 7k | — | ~2.1k | Automated safety check: Pass | CC-BY-4.0 | 17 days ago |
| 14 | Generates a Datadog Terraform provider data source from an OpenAPI operation with tfgen and opens a review-ready GitHub PR with a risk scan and testing guide. | DataDog/ | 468 | — | ~2.7k | Automated safety check: Pass | MPL-2.0 | yesterday |
| 15 | A skill your agent uses when creating or updating splunkconfig.yml, designing Splunk Enterprise lab topology, multisite IDXC, SHC layout, architecture plan before config, or AWS Terraform block for… | splunk/ | 137 | — | ~3.5k | Automated safety check: Pass | Proprietary | yesterday |
| 16 | Debugs logical errors and data discrepancies in Dataflow templates by launching jobs via Terraform and comparing source (e.g. | GoogleCloudPlatform/ | 1.3k | — | ~1.8k | Automated safety check: Pass | Apache-2.0 | today |
| 17 | Comprehensive technical diagramming toolkit for solutions architects, presales, and developers. | cmb211087/ | 150 | — | ~4k | Automated safety check: Notes | MIT | 3 mo ago |
| 18 | Creates an azd environment, checks RBAC and model quota, provisions an AI agent app on Azure with azd up and health-checks the deployed app. | Azure-Samples/ | 374 | — | ~4.7k | Automated safety check: Notes | MIT | 1 mo ago |
| 19 | 19.Frugal Cloud cost awareness for agents. An agent skill from yuanboP/frugal. | yuanboP/ | 198 | — | ~2.1k | Automated safety check: Pass | MIT | 2 mo ago |
| 20 | Writes Terraform alerting policies for AI agents that emit OpenTelemetry metrics, covering reliability, cost, safety, security and quality signals on Google Cloud. | google/ | 21k | — | ~4.2k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 21 | A skill your agent uses when authoring, reviewing, or refactoring Azure Bicep code. | timothywarner-org/ | 224 | — | ~2.9k | Automated safety check: Pass | MIT | 2 mo ago |
| 22 | 22.Atmos Lint Atmos Terraform linting with TFLint: standalone atmos terraform lint, component-aware config discovery and toolchain versions, TFLint rule configuration, and lifecycle hooks/CI findings. | cloudposse/ | 1.4k | — | ~1.1k | Automated safety check: Pass | Apache-2.0 | today |
| 23 | Verify mql provider resource/field changes against real cloud infrastructure. | mondoohq/ | 411 | — | ~3.7k | Automated safety check: Pass | Unknown | today |
| 24 | A skill your agent uses for AVM Terraform AzAPI resources, provider constraints, ARM schemas, parent IDs, resource types, retries, timeouts, response exports, replacement triggers, and… | Azure/ | 135 | — | ~2.9k | Automated safety check: Pass | MIT | yesterday |
| 25 | Design AWS architectures for startups using serverless patterns and IaC templates. | alirezarezvani/ | 28k | 1 repo | ~2.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 26 | Translate existing policy-as-code into Tirith policies. An agent skill from StackGuardian/tirith. | StackGuardian/ | 167 | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 27 | 27.Spacectl Manage Spacelift stacks, runs, modules, policies, and infrastructure via CLI. | spacelift-io/ | 173 | — | ~2.3k | Automated safety check: Pass | MIT | yesterday |
| 28 | AWS CDK CLI general PR reviewer. An agent skill from aws/aws-cdk-cli. | aws/ | 107 | — | ~2k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 29 | Write, run, and debug Playwright E2E / integration / live tests. | ansible/ | 113 | — | ~2.5k | Automated safety check: Notes | Apache-2.0 | yesterday |
| 30 | Runs Datadog Terraform provider acceptance tests in none, true or false record modes, then saves trimmed output and pass, fail and skip counts to a timestamped file. | DataDog/ | 468 | — | ~949 | Automated safety check: Pass | MPL-2.0 | yesterday |
| 31 | Design, validate, scaffold, and visualize multi-agent topologies using the .at language | agentopology/ | 103 | — | ~3.8k | Automated safety check: Pass | Apache-2.0 | 10 days ago |
| 32 | 32.Commit This skill should be used when the user asks to 'commit', 'create a commit', or 'git commit'. | ansible-collections/ | 144 | — | ~553 | Automated safety check: Pass | Unknown | 14 days ago |
| 33 | 33.Infra Sync Keep Terraform and CDK infrastructure in sync. An agent skill from agentic-community/mcp-gateway-registry. | agentic-community/ | 962 | — | ~2.7k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 34 | 34.Commit Run pre-commit validation before committing. An agent skill from Smana/cloud-native-ref. | Smana/ | 103 | — | ~778 | Automated safety check: Pass | Apache-2.0 | yesterday |
| 35 | Advisory guidance for Amazon EKS architecture and configuration decisions — compute strategy, networking, security, reliability, cost, autoscaling, observability, multi-tenancy, and upgrade planning. | aws-samples/ | 113 | — | ~5k | Automated safety check: Pass | MIT-0 | yesterday |
| 36 | Tune and review Langfuse autoscaling for web, web-iso, and web-ingestion. | langfuse/ | 35k | — | ~4.4k | Automated safety check: Pass | Unknown | today |
| 37 | Guide for running a local containerized DNS server. An agent skill from hashicorp/terraform-provider-dns. | hashicorp/ | 149 | — | ~352 | Automated safety check: Pass | MPL-2.0 | 2 days ago |
| 38 | A skill your agent uses when adding app scope/routing test coverage (deployer, CM, DS, direct). | splunk/ | 137 | — | ~2.2k | Automated safety check: Pass | Proprietary | yesterday |
| 39 | Write, validate, run and debug Tirith IaC governance policies, install Tirith, and add it to a CI pipeline (GitHub Actions, GitLab CI, Bitbucket Pipelines, Jenkins, Azure DevOps, CircleCI or any… | StackGuardian/ | 167 | — | ~1.8k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 40 | AWS CloudFormation infrastructure as code for stack management. | itsmostafa/ | 1.2k | — | ~2.5k | Automated safety check: Pass | MIT | 2 days ago |
| 41 | Update placeholders in PSBicep help markdown files. An agent skill from PSBicep/PSBicep. | PSBicep/ | 152 | — | ~299 | Automated safety check: Pass | MIT | 14 days ago |
| 42 | Runs an end-to-end workflow to diagnose, reproduce, fix and validate a failing integration test in the Datadog Terraform provider, ending with a draft PR. | DataDog/ | 468 | — | ~2.4k | Automated safety check: Notes | MPL-2.0 | yesterday |
| 43 | 43.PR Review Reviews pull requests and code changes in this Ansible collection against project standards and the Ansible Collection Review Checklist. | ansible-collections/ | 144 | — | ~1.6k | Automated safety check: Pass | Unknown | 14 days ago |
| 44 | 44.Hunt Bugs Proactively hunt for cdkd bugs by deploying real CDK apps that exercise common-but-untested AWS resources, configs, and CloudFormation notations against real AWS, then fix what breaks. | go-to-k/ | 143 | — | ~2.2k | Automated safety check: Pass | Apache-2.0 | today |
| 45 | Analyze Terraform plan JSON output for AzureRM Provider to distinguish between false-positive diffs (order-only changes in Set-type attributes) and actual resource changes. | github/ | 40k | 1 repo | ~547 | Automated safety check: Pass | MIT | today |
| 46 | Creates Dockerfiles, configures CI/CD pipelines, writes Kubernetes manifests, and generates Terraform/Pulumi infrastructure templates. | Yikai-Liao/ | 189 | 1 repo | ~1.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 47 | A skill your agent uses for AVM Terraform validation, provider-mocked unit tests, real-Azure integration tests, E2E example tests, PowerShell hooks, OIDC, policy checks, and Avm.Authoring CI behavior. | Azure/ | 135 | — | ~1.8k | Automated safety check: Pass | MIT | yesterday |
| 48 | Run a read-only preview for a specified Marin infra/pulumi stack and trace each pending resource change to merged pull requests since its latest successful update when that update records a clean… | marin-community/ | 3.9k | — | ~663 | Automated safety check: Pass | Apache-2.0 | today |
Questions, answered from the data.
What is the best infrastructure as code skill?
Terraform and OpenTofu Guide from agentscope-ai/QwenPaw ranks first of the 351 infrastructure as code skills listed here, with the highest score: its repository has 35k GitHub stars, 6 other GitHub owners carry a copy, its SKILL.md loads about 4.2k tokens and it passes the automated safety check with no findings. Next come Microsoft Skill Creator and Terraform Skill.
Which infrastructure as code skills are official?
94 of the 351 infrastructure as code skills are official, published by the vendor's own GitHub organization: Microsoft Skill Creator, Azure Architecture Autopilot, New Event Source, Datadog Data Source Generator, Azure AI Agent App Deployment and 89 more.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.
Explore related skills
More topics in DevOps & Cloud
- Deployment1,152
- CI/CD921
- Containers723
- Observability562
- Container orchestration519
- Monitoring and alerting333
- Secrets management318
- Runbooks and postmortems277
- Incident response271
- Cloud networking230
- Backup and disaster recovery170
- Site reliability engineering150
- Cloud architecture114
- MLOps101
- Cloud cost optimization93
- GitOps87
- Linux administration75
- Platform engineering51
- Chaos engineering28