akin-ozer/cc-devops-skills
32 skills13.4k installs9.2k starsGitHub
Install
npx skills add https://github.com/akin-ozer/cc-devops-skillsSkills in this repo
1Terragrunt GeneratorTerragrunt Generator is an agent skill from akin-ozer/cc-devops-skills that generates production-ready Terragrunt configurations following current naming conventions, best practices, and security standards with automatic validation. It triggers when developers need a new root.hcl, terragrunt.hcl, or terragrunt.stack.hcl, multi-environment layouts such as dev, staging, and prod, Terragrunt dependency wiring via dependency or dependencies blocks, or module source setup from local paths, Git repositories, or Terraform Registry sources. Developers reach for Terragrunt Generator instead of hand-writing repetitive HCL when bootstrapping IaC repos or adding environment-specific stack layouts. All generated configurations are validated automatically before delivery.966installs2Ansible Validatoransible-validator is a cc-devops-skills plugin skill for validating Ansible playbooks, roles, inventories, and collections before merge or deploy. It runs a deterministic 9-stage workflow: preflight tool setup, scope identification, syntax validation with yamllint and ansible-playbook --syntax-check, ansible-lint best practices, check-mode dry runs, automatic Molecule testing when molecule/ exists, custom module analysis, dual Checkov and secret scanning, and a PASS/FAIL/BLOCKED final report. Bundled bash scripts include validate_playbook.sh, validate_role.sh, test_role.sh, check_fqcn.sh, scan_secrets.sh, and validate_inventory.sh. Developers reach for ansible-validator when ansible-lint fails, modules are not found, FQCN usage is wrong, or security policies must be verified on infrastructure code.508installs3K8s Debugk8s-debug is a Claude Code skill in akin-ozer/cc-devops-skills aimed at developers responding to live Kubernetes incidents. It guides systematic triage of pods in CrashLoopBackOff, image pull failures, OOMKilled containers, probe misconfigurations, Service and Ingress networking breaks, DNS issues, and CPU or memory limit exhaustion. The workflow emphasizes kubectl-oriented evidence gathering—logs, events, describe output, and endpoint checks—so engineers can distinguish transient noise from configuration or quota problems worth a permanent fix. Teams invoke k8s-debug when a deployment rolls out but workloads never become Ready, when traffic stops reaching pods behind a Service, or when HPA or limit changes suddenly spike restarts. It complements cluster provisioning skills by focusing on fast restoration and root-cause capture under incident pressure.491installs4Jenkinsfile Generatorjenkinsfile-generator is a DevOps skill from akin-ozer/cc-devops-skills that produces production-ready Jenkinsfiles for Maven, Gradle, npm, Docker, and Kubernetes workloads. It defaults to declarative pipelines, switches to scripted Groovy only when dynamic stages are required, and always validates output through the paired jenkinsfile-validator skill. Three Python generators—generate_declarative.py, generate_scripted.py, and generate_shared_library.py—plus template assets cover parallel fail-fast tests, matrix axes, credential binding, SonarQube and OWASP scans, and Kubernetes pod agents. Developers reach for jenkinsfile-generator when onboarding microservices or monoliths to Jenkins, standardizing CI across teams, or adding approval-gated production deploy stages without hand-writing Groovy from scratch.468installs5Dockerfile Validatordockerfile-validator is an akin-ozer/cc-devops-skills agent skill that validates Dockerfiles through a deterministic eight-step flow using scripts/dockerfile-validate.sh, classifying findings into Critical, High, Medium, and Low severity buckets. It checks for hardcoded secrets, root runtime, unpinned :latest base images, missing HEALTHCHECK and USER directives, Checkov CKV_DOCKER failures, and hadolint errors, with explicit fallbacks when Docker, hadolint, or Checkov are unavailable. The skill bundles three reference guides—security_checklist.md, optimization_guide.md, and docker_best_practices.md—plus five example Dockerfiles and a test_validate.sh CI entrypoint, loading references only when issues exist to keep no-finding runs fast. Reach for dockerfile-validator when reviewing Dockerfile, Dockerfile.prod, or Dockerfile.dev before merge, CI, or production image builds, and rerun after applying recommended fixes.465installs6Ansible Generatoransible-generator is an agent skill from akin-ozer/cc-devops-skills that turns infrastructure requirements into Ansible artifacts—playbooks for task execution, roles for reusable modules, and inventories for host targeting. Developers reach for it when standing up repeatable server configuration, application deployment prep, or environment bootstrapping that must live in version control beside application code. The skill emphasizes pipeline-friendly output so provisioning steps integrate with CI/CD rather than manual SSH sessions. Use it to accelerate initial Ansible scaffolding from natural-language requirements before hardening idempotency and secrets handling in review.458installs7Dockerfile Generatordockerfile-generator is an akin-ozer cc-devops-skills skill that helps coding agents author production-oriented Dockerfiles for application services. It focuses on selecting appropriate base images, minimizing layer invalidation, declaring exposed ports, and structuring multi-stage builds that separate compile and runtime environments. Developers reach for dockerfile-generator when containerizing a new API, refactoring an ad-hoc Dockerfile, or standardizing images before registry push and orchestrator deployment. The skill emphasizes operational defaults— reproducible builds, smaller runtime images, and clear build-stage boundaries—rather than experimental local-only containers. Use it during initial service packaging or when migrating bare-metal or VM deployments to container workflows without hand-writing every FROM, COPY, and RUN directive from scratch.446installs8Helm Validatorhelm-validator is a read-only DevOps agent skill from akin-ozer/cc-devops-skills that validates Helm charts through ten ordered stages before release. The workflow runs scripts such as setup_tools.sh and validate_chart_structure.sh, then chains helm lint, helm template, yamllint, kubeconform, CRD documentation lookup via detect_crd_wrapper.sh, optional kubectl dry-run, and mandatory security best-practice checks across Chart.yaml, values.yaml, templates, and rendered manifests. Mode A works without a cluster; Mode B adds cluster dry-run when kubectl is available. Developers reach for helm-validator when helm template fails, kubeconform reports schema errors, or CI needs a severity-based pre-deploy report with Passed, Warning, Failed, or Skipped status per stage. The skill continues through partial tool or stage failures to collect complete findings and only applies fixes when explicitly requested, pairing with helm-generator in the same plugin pack for chart scaffolding.423installs9Terragrunt Validatorterragrunt-validator is a skill in akin-ozer/cc-devops-skills—part of a devops-skills plugin with generator/validator pairs for common DevOps tools. It targets Terragrunt 0.93+ HCL files including terragrunt.hcl and terragrunt.stack.hcl, plus Terragrunt Stacks workflows with unit/stack blocks. Core checks span HCL formatting (`terragrunt hcl fmt --check`), input validation, Terragrunt and Terraform syntax validation, tflint linting, Trivy and Checkov security scans, dependency graph validation, and dry-run planning. Scripts include validate_terragrunt.sh for full pipelines and detect_custom_resources.py for custom provider and module discovery. Developers reach for terragrunt-validator in PR review or CI when multi-module Terragrunt repos need repeatable fail-fast checks before merge or apply.423installs10K8s Yaml Validatork8s-yaml-validator is a DevOps skill for teams shipping workloads to Kubernetes who need manifest review before changes hit clusters. It checks YAML for schema correctness, syntax errors, and policy violations that commonly cause failed rollouts or rejected admissions. Developers invoke it during pull-request review, pre-apply checks, or CI stages where Deployment, Service, Ingress, and ConfigMap files must pass validation gates. The skill complements kubectl dry-run workflows by surfacing misconfigurations early—wrong apiVersions, malformed selectors, missing required fields, or policy conflicts—so deploy pipelines fail in CI instead of production.421installs11Bash Script Generatorbash-script-generator is a DevOps agent skill from akin-ozer/cc-devops-skills that walks agents through a mandatory requirements-capture and generation workflow for maintainable shell automation. Its SKILL.md spans roughly 25.9 KB of patterns for strict mode, traps, grep/awk/sed pipelines, API client scripts, and cron-friendly utilities, and it pairs with devops-skills:bash-script-validator for ShellCheck-backed iteration. The parent cc-devops-skills plugin advertises 31 generator and validator skills across Terraform, Docker, Kubernetes, GitHub Actions, and more. Reach for bash-script-generator when converting manual CLI steps into validated .sh files for deployment hooks, scheduled jobs, or CI glue instead of writing brittle shell from scratch.420installs12Gitlab Ci Validatorgitlab-ci-validator is a DevOps skill in akin-ozer/cc-devops-skills that orchestrates a 6-gate validation workflow on .gitlab-ci.yml through validate_gitlab_ci.sh. Required gates cover syntax and security; recommended gates add best practices; optional --test-only runs gitlab-ci-local when Docker is available. Three Python validators check syntax, best practices, and security with severity levels from critical through suggestion. Developers reach for gitlab-ci-validator when editing stages, includes, or job dependencies and need pre-merge CI review on GitLab.416installs13Jenkinsfile Validatorjenkinsfile-validator is a comprehensive Jenkins pipeline validation skill from akin-ozer/cc-devops-skills for Declarative and Scripted Jenkinsfiles plus shared-library Groovy. The skill auto-detects pipeline type, then runs scripts such as validate_jenkinsfile.sh, validate_declarative.sh, validate_scripted.sh, common_validation.sh, best_practices.sh, and validate_shared_library.sh to catch syntax errors, hardcoded secrets, credential misuse, CPS compatibility problems, and @NonCPS violations in vars/*.groovy and src/**/*.groovy files. CLI flags support syntax-only, security-only, best-practices-only, strict mode treating warnings as failures, and subset runs so CI can fail fast in pull request review. Developers reach for jenkinsfile-validator when Jenkins jobs break on the controller, shared-library steps misbehave, or pipeline changes need categorized errors and warnings before merge. Outputs are unified summaries designed for review comments and pre-merge quality gates rather than silent rewrites.416installs14Azure Pipelines Generatorazure-pipelines-generator is a DevOps skill from akin-ozer/cc-devops-skills that drafts Azure Pipelines YAML covering build, test, and deploy stages. It targets teams onboarding Azure DevOps CI/CD who want agent-generated pipeline files instead of copying snippets by hand. Developers reach for azure-pipelines-generator when standing up a new service pipeline, adding test gates, or wiring deployment stages into azure-pipelines.yml. The catalog description emphasizes speed for teams that know their stack but not every Azure Pipelines syntax detail.413installs15K8s Yaml Generatork8s-yaml-generator is a Claude Code skill from akin-ozer/cc-devops-skills that scaffolds production-ready Kubernetes manifests through a six-step deterministic workflow: preflight, input capture, bounded CRD lookup, YAML generation, mandatory validation, and structured delivery. It supports built-in resources and custom CRDs (for example Argo CD Application) with bounded Context7 lookups (max 2 resolve attempts, 3 query-docs calls) and up to 3 fix/revalidate cycles. Safe defaults include namespace default, 2 replicas, ClusterIP services, and IfNotPresent image pull policy. Reach for k8s-yaml-generator when creating or updating manifests; use k8s-yaml-validator for validation-only requests.411installs16Bash Script Validatorbash-script-validator is an agent skill from akin-ozer/cc-devops-skills that reviews bash shell scripts before they merge or deploy. The skill checks syntax validity, flags common bash pitfalls such as unquoted variables and fragile command substitutions, and surfaces unsafe patterns that cause production failures in CI/CD or server automation. Developers reach for bash-script-validator when shell scripts power deploy hooks, cron jobs, or pipeline steps and need an early review gate without running every script on a live host. It fits the ship-phase review step so shell automation fails in pull request review instead of during a production deployment.407installs17Helm Generatorhelm-generator is an agent skill from akin-ozer/cc-devops-skills that scaffolds production-ready Helm charts when developers need to package microservices for Kubernetes without hand-writing every template from scratch. The skill generates chart structure with sensible defaults for Deployments, Services, Ingress rules, Secret references, and environment-specific values files suited to staging and production promotion workflows. Developers reach for helm-generator when onboarding a new service to a cluster, standardizing Helm layout across a fleet, or replacing ad-hoc kubectl manifests with chart-based releases integrated into CI/CD. helm-generator focuses on chart scaffolding and Kubernetes packaging conventions rather than writing application business logic, making it practical during infra iteration when Helm is already the deployment standard. Invoke when asked to create a new Helm chart, add ingress and secrets templates, or structure values.yaml for multi-environment Kubernetes releases.407installs18Azure Pipelines Validatorazure-pipelines-validator is a DevOps skill in akin-ozer/cc-devops-skills, one of 14 validator skills in a 31-skill pack. It runs local bash and Python scripts via validate_azure_pipelines.sh with modes for syntax-only, best-practices, security-only, and strict review. The checker flags rule IDs such as yaml-syntax, hardcoded-secret, task-version-zero, and deployment-missing-strategy, then returns a severity-bucketed report with Blocking, Warning, Info, and Skipped counts. Developers reach for azure-pipelines-validator when editing azure-pipelines.yml, refactoring shared templates, or gating CI changes before merge.403installs19Github Actions Generatorgithub-actions-generator is a cc-devops-skills agent skill that creates .github/workflows CI/CD YAML, workflow_call reusable pipelines, and custom action.yml packages following current security and naming conventions. A trigger decision tree routes requests to workflow generation, custom action scaffolding, reusable workflow templates, or security-scanning patterns covering dependency review, SBOM, and CodeQL. The skill ships six reference guides—best practices, common actions, expressions and contexts, advanced triggers, custom actions, and modern features—and mandates post-generation validation via devops-skills:github-actions-validator with fix-and-revalidate loops. Developers install it from akin-ozer/cc-devops-skills alongside validators for Azure Pipelines, GitLab CI, Jenkins, and Terraform. Reach for it when bootstrapping GitHub CI instead of hand-writing pinned action SHAs, minimal permissions, concurrency controls, and timeout defaults from scratch.403installs20Terraform Validatorterraform-validator is a Claude Code skill for infrastructure engineers who need automated Terraform review before merge or terraform apply in CI/CD pipelines. The skill inspects Terraform plan output and HCL source for policy violations, unsafe defaults, missing remote backends, and provider misconfigurations that commonly slip past manual review. Developers reach for terraform-validator when pull requests touch modules, state backends, or provider blocks and they want a consistent gate before production applies. It fits teams running Terraform in GitHub Actions, GitLab CI, or local pre-commit hooks who need repeatable infra policy checks without writing custom OPA or Sentinel rules from scratch.399installs21Github Actions Validatorgithub-actions-validator is one of 14 validators in akin-ozer/cc-devops-skills (31 skills total) that lint and test .github/workflows/*.yml using actionlint for schema, expression, CRON, runner-label, and script-injection checks, plus act for local job execution when Docker is available. A seven-step flow runs validate_workflow.sh, maps errors to six reference files (common_errors, runners, action_versions, act_usage, actionlint_usage, modern_features), applies minimal fixes, and mandates a post-fix rerun. Use github-actions-validator before committing workflow changes, debugging actionlint failures, or verifying Marketplace action versions and deprecations offline via references/action_versions.md.397installs22Gitlab Ci Generatorgitlab-ci-generator is an akin-ozer/cc-devops-skills skill for production-ready GitLab CI/CD pipeline generation. Route requests across three modes: Targeted (snippet or review), Lightweight (simple single-file pipelines), and Full (multi-environment deploys, includes, advanced rules, SAST). Mandatory pre-generation loads tiered references—best-practices.md, common-patterns.md, security-guidelines.md—and picks from four templates: basic-pipeline.yml, docker-build.yml, kubernetes-deploy.yml, and multi-project.yml. Generated pipelines pass validation through the companion gitlab-ci-validator skill with Critical/High gates before delivery. Supports Docker build and push, Kubernetes deploy with kubectl, parent-child multi-project triggers, reusable extends/anchors, and GitLab SAST/Dependency-Scanning template includes. Invoke when asked to create .gitlab-ci.yml, add Docker or K8s deploy jobs, or include security scanning templates.397installs23Terraform Generatorterraform-generator is a cc-devops-skills agent skill for creating Terraform .tf HCL covering resources, modules, providers, variables, outputs, and backend configuration. It enforces a nine-step mandatory workflow: understand requirements, look up custom provider documentation via WebSearch or Context7 MCP, consult three reference files (terraform_best_practices.md, provider_examples.md, common_patterns.md), generate main.tf/variables.tf/outputs.tf/versions.tf with data sources and lifecycle rules on critical resources, then invoke devops-skills:terraform-validator and fix failures until all checks pass. Standard HashiCorp providers like AWS, Azure, GCP, and Kubernetes skip extra lookup, while third-party providers require version-specific documentation searches. Developers reach for it when bootstrapping new environments or extending IaC repos instead of writing unconstrained HCL that fails terraform validate or security scans on first apply.396installs24Makefile Validatormakefile-validator is a Claude Code skill from akin-ozer/cc-devops-skills that audits Makefile, makefile, and *.mk files with a local-first, deterministic validation pipeline. The skill runs GNU make dry-run syntax checks, mbake validate and format --check stages inside a temporary Python venv, and custom security and best-practice pattern scans with optional checkmake and unmake coverage when installed. It reports line numbers, fix suggestions, and color-coded exit codes where 0 means clean, 1 signals warnings, and 2 blocks on errors. Developers reach for makefile-validator before merging Makefile changes, during code review of build configs, or when wiring the bundled GitHub Action wrapper into CI/CD. The validator enforces .PHONY declarations, tab indentation, circular dependency detection, parallelism safety, and credential-leak grep checks so broken or unsafe recipes fail early.392installs25Makefile Generatormakefile-generator is an akin-ozer/cc-devops-skills agent skill that creates production-ready Makefiles with .PHONY targets, GNU Coding Standards compliance, security hardening, and optional validation via the companion makefile-validator skill. It supports C/C++, Python, Go, and Java projects through a three-stage workflow: gather language and target requirements, consult six internal docs (structure, variables, targets, patterns, optimization, security guides), then generate the Makefile with standard all, install, clean, test, dist, and help targets. Optional helper scripts include generate_makefile_template.sh and add_standard_targets.sh for fast paths. Docker integration, multi-binary layouts, cross-compilation, and ldflags version embedding are covered in patterns-guide.md. Developers reach for makefile-generator when asked to create, generate, or write a Makefile—not to debug builds or validate existing files.391installs26Promql Generatorpromql-generator is an agent skill in akin-ozer/cc-devops-skills that helps developers author PromQL queries for Prometheus metrics and Grafana dashboards without manually combing label conventions and aggregation syntax. The skill generates rate, histogram_quantile, sum by, and alert threshold expressions tailored to service-level indicators, error budgets, and saturation signals when on-call engineers need fast answers during incidents or when platform teams scaffold new observability panels. Developers reach for promql-generator when existing dashboards miss a metric slice, SLO burn alerts need refinement, or label cardinality makes raw Prometheus explorer queries slow and error-prone. The skill fits operate-phase work where Kubernetes workloads, HTTP services, and batch jobs already export metrics and teams must translate operational questions—p95 latency, error ratio, queue depth—into durable PromQL recording rules and alertmanager definitions. Install via cc-devops-skills through the skills CLI so Claude Code or Cursor sessions produce copy-paste-ready PromQL during monitoring tasks.391installs27Promql Validatorpromql-validator is a cc-devops-skills agent skill from akin-ozer that lints PromQL expressions before developers apply alert rules or import dashboard JSON into Grafana staging or production environments. The workflow catches invalid PromQL functions, malformed label matchers, and cardinality traps that would otherwise surface as silent query failures, empty panels, or runaway metric series after deployment. Agents invoke promql-validator when reviewing Grafana alert YAML, Prometheus recording rules, or dashboard panel queries so platform teams fix syntax and performance issues in pull requests rather than during incidents. promql-validator fits observability engineers and SREs who maintain Prometheus-compatible monitoring stacks and want automated guardrails before changes reach clusters. The skill complements Grafana and Prometheus CI pipelines by treating PromQL as reviewable infrastructure code rather than ad hoc console experimentation. Developers reach for promql-validator whenever alert or dashboard diffs need static validation before merge to observability repos.381installs28Logql GeneratorGenerates Grafana Loki LogQL queries for log line filtering, JSON parsing, rate and count aggregations, and label-based drilldowns used in dashboards, alerts, and on-call investigations.378installs29Fluentbit Generatorfluentbit-generator is an agent skill from akin-ozer/cc-devops-skills that generates production-ready Fluent Bit configurations with SERVICE, INPUT, FILTER, OUTPUT, and PARSER sections. The bundled generate_config.py script supports 13 named use cases including kubernetes-loki, kubernetes-elasticsearch, kubernetes-cloudwatch, kubernetes-opentelemetry, application-multiline, syslog-forward, file-tail-s3, http-kafka, multi-destination, prometheus-metrics, lua-filtering, stream-processor, and custom. The skill directory includes 19 files with example configs and parsers.conf for docker, cri, json, nginx, and multiline Java, Python, Go, and Ruby patterns. Agents gather input sources, parsing needs, filters, and destinations, then emit fluent-bit.conf with buffer limits, flush intervals, TLS, and retry settings. Pair with fluentbit-validator in the same repo to dry-run configs when the fluent-bit binary is available.373installs30Fluentbit Validatorfluentbit-validator is an agent skill in akin-ozer/cc-devops-skills for deterministic Fluent Bit config review. Stage 0 checks `python3` and `fluent-bit` binaries; Stage 1 runs `python3 scripts/validate_config.py --file <config> --check all` covering structure, sections, tags, security, performance, and best-practices; Stage 2 optionally runs `fluent-bit -c <config> --dry-run`. Findings use only Error, Warning, and Recommendation severities, with `--fail-on-warning` for CI gates and `--require-dry-run` when the binary must be present. Sample valid and invalid configs live under `tests/*.conf` with `tests/test_validate_config.py` regression coverage. Reach for fluentbit-validator before promoting fluent-bit.conf to K8s DaemonSets or edge nodes. Skip it when you are not running Fluent Bit or only need unrelated log stack tooling.371installs31Loki Config Generatorloki-config-generator is a DevOps skill from akin-ozer/cc-devops-skills that generates production-ready Grafana Loki YAML for centralized log aggregation. The skill addresses ingestion pipelines, retention policies, storage backend selection, rate limits, and compactor tuning so teams can deploy Loki without hand-writing every operational knob. Developers reach for loki-config-generator when bootstrapping observability stacks on Kubernetes or bare metal, migrating from file-based logging, or tuning retention and storage costs. Output targets standard Loki config files ready for Helm, Docker Compose, or direct daemon deployment.360installs32Devops Skillsdevops-skills is a Claude Code skill in the DevOps & CI/CD category. DevOps skills for Claude Code.0installs