bagelhole/devops-security-agent-skills
163 skills15.3k installs7.2k starsGitHub
Install
npx skills add https://github.com/bagelhole/devops-security-agent-skillsSkills in this repo
1Linux Administrationlinux-administration version 1.0 from devops-security-agent-skills covers core Linux system administration for production servers, development environments, and infrastructure hosts on Debian/Ubuntu and RHEL/CentOS families. The skill guides package install and removal, service management, filesystem and mount maintenance, runaway process investigation, user and permission changes, and log review through agent-safe command patterns. Developers reach for linux-administration when SSHing into hosts to unblock deploys, tune services, or diagnose resource spikes without memorizing distribution-specific flags. MIT-licensed and aimed at repeatable server ops, it complements container and CI workflows where bare-metal or VM hosts still need disciplined administration.304installs2Linux Hardeninglinux-hardening is a security-focused agent skill from bagelhole/devops-security-agent-skills that walks developers through hardening Linux production servers. The skill covers disabling unused services, applying CIS benchmark recommendations, tightening SSH configuration, fixing file permissions, tuning kernel parameters, and enabling audit logging so hosts meet baseline compliance. Developers reach for linux-hardening when provisioning or auditing VMs, containers, or bare-metal nodes before go-live or after a security review flags excessive attack surface. It pairs naturally with infrastructure-as-code workflows where agents need explicit checklists rather than ad-hoc shell one-liners.300installs3Docker Composedocker-compose from devops-security-agent-skills helps author, review, and secure Docker Compose files that wire application services, databases, and supporting infrastructure for reproducible local and staging environments.160installs4Docker ManagementDocker management skill equips coding agents to build, run, debug, and maintain containerized workloads including images, compose files, networking, volumes, and production deployment patterns.159installs5Windows ServerWindows Server operations skill for agent-assisted administration of AD DS, DNS, IIS, Group Policy, security baselines, patching, backup and restore, and common enterprise Windows infrastructure troubleshooting procedures.151installs6Prometheus GrafanaPrometheus and Grafana skill enables agents to instrument services, configure metric scraping, author alerting rules, and build operational dashboards for production observability.150installs7Hashicorp VaultAgent skill for HashiCorp Vault covering secret engines, ACL policies, AppRole and Kubernetes authentication, lease management, rotation workflows, and secure credential injection patterns for DevOps security automation.144installs8Sops EncryptionTeaches agents to manage secrets with Mozilla SOPS across repositories and CI/CD, including encrypting YAML and env files, selecting KMS or age keys, validating decryption in pipelines, and rotating credentials without exposing plaintext in version control.142installs9Firewall Configfirewall-config is an AI coding tool that enhances development workflows. Builders use it for infrastructure, integration, and platform development within the catalog ecosystem.140installs10Reverse ProxyThis skill configures nginx and Traefik as reverse proxies. A developer uses it to route public traffic to backend services, terminate TLS at the edge, add rate limiting and security headers, and handle WebSocket upgrades. It covers path-based routing, compression, and Let's Encrypt certificates via certbot.138installs11Terraform GcpTerraform skill for Google Cloud Platform guiding module structure, provider setup, IAM bindings, networking, managed services like GKE and Cloud SQL, and reproducible IaC workflows for agent-assisted cloud provisioning.136installs12Systemd ServicesCreates and manages systemd services and timers on Linux. A developer uses it to author unit files with dependencies, resource limits, and security hardening, replace cron jobs with timers, and set up socket activation. It also covers journalctl log analysis and debugging service startup failures.132installs13Ssh ConfigurationConfigures SSH servers and clients securely for production remote access. A developer uses it to generate and manage keys, harden sshd_config, and set up bastion hosts, tunnels, and connection multiplexing. It also covers troubleshooting connection and authentication issues.126installs14PostgresqlThis skill administers PostgreSQL databases in development and production. A developer uses it to configure streaming replication, run pg_dump and pg_basebackup backups, tune postgresql.conf, and set up client authentication. It also covers monitoring queries for connections, long-running queries, and table bloat.125installs15Performance TuningPerformance Tuning optimizes Linux system performance through kernel parameter tuning, I/O scheduler selection, memory management, and CPU governor configuration. A developer uses it to collect baselines, isolate whether a bottleneck is CPU, memory, disk, or network, apply single sysctl changes, and re-benchmark. It includes concrete network and memory sysctl settings plus tool-based validation.124installs16Vulnerability Scanningvulnerability-scanning is a skill for identifying and prioritizing security vulnerabilities across infrastructure and applications. It covers scanning tools like Nessus, OpenVAS, Qualys and Nuclei, plus CVSS scoring and remediation triage. A developer or security engineer uses it when performing assessments, compliance scans or vulnerability management.122installs17Penetration TestingPenetration Testing validates security controls through authorized testing. A developer uses it to run a five-phase assessment covering reconnaissance, scanning, exploitation, post-exploitation, and reporting, with concrete tooling for DNS enumeration, port and vulnerability scanning, and web testing. It stresses written authorization, defined scope, and documenting findings.119installs18Vpn Setupvpn-setup is a skill for configuring secure VPN tunnels for remote access and site-to-site connectivity. It covers WireGuard, OpenVPN and cloud VPNs, including server and client configs, split tunneling and peer management scripts. A developer uses it when providing encrypted access to internal services without exposing them publicly.119installs19Container HardeningContainer Hardening is a skill for securing Docker images and container runtime configurations. It shows how to run containers as a non-root user, enforce a read-only root filesystem, drop Linux capabilities, and set Kubernetes security contexts. A developer uses it when building secure container images or hardening deployments against container escape and privilege escalation.118installs20Terraform AwsProvisions AWS infrastructure with Terraform. A developer uses it to configure the AWS provider, manage remote state in S3, and declare resources like VPCs and EC2 instances. It also lists Infrastructure-as-Code best practices such as remote state locking and provider version pinning. The SKILL.md is brief, covering provider config, example resources, modules, and commands.118installs21Windows Hardeningwindows-hardening is a skill for securing Windows Server following Microsoft security baselines and CIS benchmarks. It covers account and password policies, Group Policy security settings, SMBv1/LLMNR/WDigest disabling, LAPS and Windows Defender via PowerShell. A developer or admin uses it when hardening deployments or preparing for compliance audits.118installs22RedisThis skill configures, operates, and optimizes Redis for caching, queues, rate limiting, and real-time data. A developer uses it to set up redis.conf, RDB and AOF persistence, Sentinel high availability, and Cluster-mode sharding. It includes command references and common patterns like cache-aside, sliding-window rate limiting, and pub/sub.114installs23Ssl Tls ManagementManages SSL/TLS certificates with Let's Encrypt and internal PKI across web servers and Kubernetes. A developer uses it to set up HTTPS, automate certificate renewal, deploy cert-manager, and audit cipher suites for compliance. It also covers responding to expiring or compromised certificates.111installs24Kustomizekustomize is a skill that customizes Kubernetes manifests declaratively without templating. It shows how to build a base configuration with per-environment overlays, patch resources with strategic-merge and JSON patches, generate ConfigMaps and Secrets, and transform images. A developer uses it to manage Kubernetes config across multiple environments without Helm.110installs25Audit LoggingA skill for implementing centralized audit logging and SIEM integration. It defines audit event categories, provides rsyslog and journald configurations for centralized logging, and shows hash-chained JSON logs for tamper detection. A developer uses it to build audit trails and log retention for compliance frameworks like SOC 2, HIPAA, and PCI DSS.109installs26Database BackupsDatabase Backups is a skill for implementing automated backup and recovery for PostgreSQL, MySQL, and MongoDB. It covers logical dumps, physical backups for point-in-time recovery, restore procedures, uploading to S3, and retention policies. A developer uses it to design a backup plan and disaster-recovery runbook from day one.108installs27Gdpr Compliancegdpr-compliance implements General Data Protection Regulation requirements for organizations processing personal data of EU/EEA residents. A developer uses it to build consent management and preference centers, implement Data Subject Access Request workflows, and apply privacy-by-design safeguards. It provides ROPA templates, legal-basis mapping, and consent code.107installs28Incident ResponseA Claude skill for handling security incidents with structured response procedures. A security engineer uses it to build IR playbooks, run detection, containment, eradication, and recovery, and collect forensic evidence during a breach or intrusion. It includes ready-to-run Linux evidence-collection scripts and severity classification.107installs29Kubernetes Opskubernetes-ops is a skill that helps an agent deploy and manage containerized applications on Kubernetes clusters. It supplies YAML templates for Deployments, Services, Ingress, ConfigMaps, Secrets, HPA, PVCs and StatefulSets, plus kubectl commands for applying config, viewing logs, scaling and debugging pods. A developer uses it when writing K8s manifests or troubleshooting workloads.107installs30Backup RecoveryThis skill implements backup and recovery strategies using rsync, Restic, and cloud storage backends. It covers the 3-2-1 rule, incremental and encrypted deduplicated backups, S3 and Backblaze B2 backends, systemd and cron scheduling, database dumps, restore procedures, and integrity verification. A developer uses it to design data protection for servers, databases, or application data.106installs31Github ActionsA Claude skill for building GitHub Actions CI/CD pipelines. A developer uses it when setting up workflows in .github/workflows/ to automate build, test, and deploy steps for a GitHub repository. It covers triggers, matrix builds, dependency caching, artifacts, secrets, Docker builds, reusable workflows, and self-hosted runners.106installs32PodmanPodman is a skill for running and managing containers without a daemon using its rootless container engine. A developer uses it to run Docker-compatible commands, create Kubernetes-style pods, integrate with systemd via generated units or Quadlet, and manage images, networks, volumes, and registries. It suits security-conscious environments and systems without Docker.106installs33Gcp Networkinggcp-networking designs, implements, and secures network infrastructure on Google Cloud Platform. A developer uses it to build VPCs and firewall rules, set up Cloud NAT for private-instance egress, deploy load balancers, and configure Cloud Armor, Private Service Connect, and Shared VPC. It provides gcloud commands and Terraform config.105installs34OpenshiftOpenShift is a skill for deploying and managing applications on Red Hat OpenShift Container Platform and OKD. A developer uses it to authenticate with the oc CLI, create projects, deploy from images, source, or templates, and configure OpenShift-specific features like Routes, BuildConfigs, and ImageStreams. It also covers DeploymentConfigs, ConfigMaps, and Secrets.105installs35Aws Ecs FargateA skill for deploying containers on Amazon ECS with Fargate. It covers cluster setup, pushing images to ECR, task definitions with secrets and health checks, and services behind a load balancer with rolling deployments. A developer uses it to run containerized workloads on AWS without managing servers.102installs36Gcp Secret Managergcp-secret-manager stores and manages secrets securely in Google Cloud Secret Manager. A developer uses it to create and version secrets, configure least-privilege IAM bindings, integrate secrets with GKE workloads via Workload Identity, and handle rotation and expiration. It provides gcloud commands and Kubernetes manifests.102installs37Sast ScanningThis skill performs static application security testing with Semgrep, CodeQL, and SonarQube. A developer uses it to find vulnerabilities in source code before deployment, write custom rules for issues like SQL injection and hardcoded passwords, and add security gates to CI/CD. It includes tool comparisons and GitHub Actions workflows.101installs38Dast ScanningDAST Scanning is a skill for dynamic application security testing against running applications. It covers OWASP ZAP baseline, full, and API scans, the ZAP automation framework, Burp Suite REST-API automation, and CI integration. A developer uses it to find runtime vulnerabilities and test authentication and API security on deployed apps.100installs39Kubernetes HardeningA Claude skill for hardening Kubernetes clusters and workloads. A developer uses it to apply Pod Security Standards, restrictive security contexts, network policies, and least-privilege RBAC. It also recommends etcd encryption, audit logging, and service-mesh mTLS to meet security compliance.99installs40Soc2 ComplianceImplements SOC 2 Trust Services Criteria controls, evidence collection, and continuous compliance monitoring. A developer uses it to map existing controls to the criteria, automate evidence gathering for auditors, and build compliance checks into CI/CD. It covers security, availability, processing integrity, confidentiality, and privacy criteria for Type I and Type II audits.99installs41Gcp Gkegcp-gke deploys, operates, and scales managed Kubernetes clusters (GKE) on Google Cloud Platform. A developer uses it to create Standard or Autopilot clusters, configure node pools and workload identity, and deploy workloads with managed-SSL ingress. It provides gcloud cluster commands, Kubernetes manifests, and Terraform config.98installs42Git WorkflowGit Workflow is a procedural agent skill for solo builders and tiny teams who need a written, repeatable version-control policy instead of everyone guessing branch names and merge rules. It activates when you are standing up collaboration on a new repo, migrating from chaotic long-lived branches, or aligning release cadence with CI/CD maturity. The skill emphasizes trunk-based development for continuous deployment scenarios—short branches, frequent rebase, fast merge to main—while framing GitFlow and GitHub Flow as alternatives when release trains or review gates differ. Expect bash-level recipes for checkout, rebase, merge, and cleanup rather than a hosted-platform click-by-click wizard. Pair it with your existing CI skill so branch protection and required checks match the strategy you choose. Outcomes are clearer PR etiquette, fewer merge conflicts, and a branch model that matches how often you actually ship.98installs43Aws CloudtrailA skill for configuring AWS CloudTrail for audit logging across an organization. It covers creating multi-region organization trails, hardening the S3 log bucket, advanced event selectors for management and data events, and CloudWatch alarms for sensitive activity. A developer uses it to audit AWS activity for compliance and security investigation.97installs44Security AutomationThis skill automates security workflows and remediation for DevSecOps. A developer uses it to build a security pipeline with secret scanning, SAST, dependency and container scans, plus automated remediation and SOAR playbooks. It includes compliance-as-code via Checkov custom checks. The SKILL.md is concise and mostly a set of starter templates.97installs45Threat ModelingConducts threat modeling using the STRIDE methodology to identify threats, assess risks, and design controls. A developer uses it when designing a new system or making architectural changes to surface spoofing, tampering, and privilege-escalation risks. It provides a STRIDE worksheet template with risk scoring and mitigation mapping.97installs46Vendor Managementvendor-management is a skill for running a third-party vendor risk management program. It defines risk tiers, security questionnaires, contract requirements and ongoing oversight to satisfy SOC 2, ISO 27001 and regulatory frameworks. A developer or security lead uses it when onboarding vendors, running annual reassessments, or preparing audit evidence.97installs47JenkinsA Claude skill for creating and managing Jenkins CI/CD pipelines. A developer uses it to author Jenkinsfiles, configure Docker and Kubernetes agents, manage credentials and parameters, and build shared libraries for pipeline reuse. It targets Jenkins 2.x servers in enterprise build-automation environments.96installs48Waf Setupwaf-setup is a skill for deploying and tuning Web Application Firewalls to protect web apps and APIs. It covers AWS WAF and Cloudflare WAF plus self-hosted Nginx ModSecurity, with managed rule sets, rate limiting, geo-blocking and Terraform. A developer uses it when adding OWASP Top 10 protection or a virtual patching layer to a public-facing app.96installs49Aws S3This skill configures Amazon S3 object storage using AWS CLI v2. It covers creating buckets with encryption, versioning and public-access blocks, writing bucket policies, setting lifecycle rules, enabling cross-region replication, and generating presigned URLs. A developer uses it when standing up or hardening object storage on AWS. It includes a Terraform bucket example and access-denied troubleshooting.95installs50Helm ChartsA Claude skill for creating and managing Helm charts to package Kubernetes applications. A developer uses it to build reusable chart templates, configure values, template Deployments and Ingress, and manage releases and upgrades. It targets Helm 3.x with kubectl configured against a cluster.95installs51User Managementuser-management is a skill for administering Linux user accounts, groups, sudo access, PAM modules and LDAP integration. A developer uses it when creating or deprovisioning accounts, granting scoped sudo rights, or auditing access on servers. It bundles command recipes for bulk user operations and access reviews.95installs52New RelicThis skill configures the New Relic observability platform for infrastructure and application monitoring. It covers infrastructure agents, APM agents for Node.js, Python, Java, and Go, custom instrumentation, distributed tracing, dashboards, alerts, and NRQL queries. A developer uses it to implement full-stack observability with New Relic One. It matters for monitoring application and infrastructure health and tracing requests across services.94installs53Container ScanningContainer Scanning is a skill for finding vulnerabilities and misconfigurations in container images. It compares tools like Trivy, Grype, Clair, Snyk Container, and Docker Scout, and shows how to wire scans into CI with severity thresholds and SARIF output. A developer uses it to build container security gates or to scan registry images for compliance.93installs54Disaster RecoveryDisaster Recovery is a skill for planning and implementing business-continuity strategies. It covers RTO/RPO target-setting by service tier, comparing DR strategies (backup-and-restore, pilot light, warm standby, multi-site active), and AWS cross-region failover with RDS replicas, Aurora Global Database, and S3 replication. A developer uses it to build DR architecture and failover runbooks and to meet compliance contingency requirements.93installs55Gcp Cloud Sqlgcp-cloud-sql provisions and manages fully managed relational databases (PostgreSQL, MySQL, SQL Server) on Google Cloud. A developer uses it to create HA instances, configure backups and point-in-time recovery, set up private IP and read replicas, and connect via the Cloud SQL Auth Proxy. It includes tier references and Terraform config.93installs56Service MeshImplements Istio or Linkerd service meshes for microservice communication on Kubernetes. A developer uses it to enable automatic mTLS, canary traffic splitting, retries, and circuit breakers without changing application code. It also covers authorization policies and observability addons like Kiali and Jaeger.93installs57Argocd GitopsA skill for implementing GitOps continuous delivery to Kubernetes with ArgoCD. It covers Application definitions for plain manifests, Helm, and Kustomize, ApplicationSets for multi-environment rollout, projects with RBAC, and automated sync policies. A developer uses it when automating Kubernetes deployments from a Git repository.92installs58Cis BenchmarksThis skill audits and remediates CIS security benchmark violations. It covers automated assessment with OpenSCAP, Lynis, InSpec, and kube-bench, plus a scan-analyze-remediate-validate hardening workflow. A developer or security engineer uses it when assessing compliance, implementing security baselines, or hardening systems to standards. It matters for meeting regulatory requirements and establishing repeatable security baselines.92installs59Dependency ScanningDependency Scanning is a skill for finding vulnerabilities in third-party dependencies (software composition analysis). It covers Snyk, GitHub Dependabot, OWASP Dependency-Check, npm audit, and pip-audit, with CI integration, ignore/suppression policies, and severity thresholds. A developer uses it to secure the software supply chain and automate remediation.92installs60Incident ManagementA Claude skill for implementing production incident management processes. A developer or SRE uses it to define severity levels, escalation matrices, war room procedures, on-call schedules, and blameless post-mortems. It maps incident response practices to compliance needs like SOC 2, HIPAA, and PCI DSS.92installs61Iso27001 ComplianceA Claude skill for implementing an ISO/IEC 27001:2022 Information Security Management System. A developer or security lead uses it to define ISMS scope, run asset-based risk assessments, build a risk treatment plan and Statement of Applicability, and prepare for certification audits. It documents the Plan-Do-Check-Act cycle and Annex A control mapping.92installs62Terraform AzureProvisions Azure infrastructure with Terraform using the AzureRM provider. A developer uses it to configure providers, manage remote state in Azure storage, and deploy resource groups, VNets, AKS, and Key Vault. It includes full .tf file examples, variable validation, and production plan/apply workflows.92installs63Agent Evalsagent-evals is a skill that builds automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates. A developer uses it when shipping agent features or changing prompts to validate prompt correctness, tool-selection decisions, multi-step task quality, and adversarial safety. It provides pytest patterns and an LLM-as-judge scorer to gate deployments on measured quality.91installs64Dns ManagementDNS Management is a skill for configuring and managing DNS zones and records for production infrastructure. It covers AWS Route 53, Cloudflare, and Terraform-managed DNS, a reference of record types, health checks, and email-security records (SPF, DKIM, DMARC). A developer uses it to set up domains, migrate providers, or troubleshoot resolution and propagation issues.91installs65MongodbThis skill administers, optimizes, and secures MongoDB document databases in development and production. It covers installation, authenticated user setup, indexing, aggregation pipelines, replica sets, and backup and restore. A developer uses it when running a document-oriented database with flexible schemas or horizontal scaling via sharding. It matters for operating MongoDB reliably with proper auth, indexes, and replication.91installs66MysqlThis skill administers, optimizes, and secures MySQL and MariaDB relational databases in development and production. It covers installation, user and grant setup, InnoDB tuning, source-replica replication, and logical and physical backups. A developer uses it for a mature relational database, especially with MySQL-specific stacks like WordPress or Magento, or when setting up read-scaling replication. It matters for running MySQL reliably with tuned InnoDB and safe backups.91installs67Ai Agent Securityai-agent-security is a skill that secures agentic AI systems with defense-in-depth controls against prompt injection, tool abuse, and data exfiltration. A developer uses it when building or hardening agents that invoke tools, access data, or touch production infrastructure. It provides a STRIDE threat model, input-validation code, sandboxing guidance, and least-privilege tool scoping.90installs68Azure DevopsThis skill sets up Azure Pipelines for CI/CD using YAML multi-stage pipelines. It covers branch and pull-request triggers, parallel jobs, matrix strategies, job dependencies, and deploying to Azure and other platforms. A developer uses it when building enterprise CI/CD in Azure DevOps. It focuses on build and release stage configuration.90installs69Llm Inference Scalingllm-inference-scaling is a skill that auto-scales LLM inference clusters on Kubernetes using KEDA, GPU metrics and horizontal pod autoscaling. It shows how to deploy vLLM on GPU nodes, scale on queue depth and KV-cache usage via Prometheus, run queue-based batch scaling with Redis, and use spot instances for cost efficiency. A developer uses it to handle unpredictable inference traffic on a GPU fleet.90installs70Asset InventoryA skill for maintaining an IT asset inventory and configuration management database. It defines an asset schema, provides automated cloud discovery scripts for AWS resources, and enforces tagging for compliance frameworks like ISO 27001, SOC 2, and FedRAMP. A developer uses it to build a complete inventory ahead of audits and for operational visibility.89installs71Aws Secrets ManagerThis skill stores, retrieves, and rotates secrets in AWS Secrets Manager using AWS CLI and boto3. It covers creating JSON and binary secrets, KMS encryption, resource-based access policies, and a four-step Lambda rotation function for database credentials. A developer uses it to replace hardcoded secrets and meet credential-rotation compliance. It includes application integration examples and troubleshooting.89installs72Gitlab CiA Claude skill for configuring GitLab CI/CD pipelines and runners. A developer uses it to author .gitlab-ci.yml files that automate building, testing, and deploying on gitlab.com or self-hosted GitLab. It covers stages, rules-based execution, parallel and matrix jobs, caching, artifacts, environments, Docker builds, and runner setup.89installs73Elk Stackelk-stack deploys and manages the ELK Stack (Elasticsearch, Logstash, Kibana) for log aggregation and analysis. A developer uses it to set up Docker-based log pipelines, configure index templates and lifecycle policies, and build log search and dashboards. It centralizes logs from multiple sources so teams can investigate errors and monitor services.88installs74Fedramp Compliancefedramp-compliance implements FedRAMP requirements for cloud service providers serving US federal agencies. A developer uses it to configure NIST 800-53 controls, establish continuous monitoring, and prepare for a 3PAO audit. It maps impact levels and control families to concrete cloud implementation notes.88installs75Gcp Audit Logsgcp-audit-logs configures GCP Cloud Audit Logs for compliance, security investigation, and operational monitoring. A developer uses it to enable organization-wide audit logging, route logs to BigQuery or a SIEM, and alert on administrative and data access events. It documents the four audit log types and export sink patterns.88installs76Gcp Computegcp-compute deploys, manages, and scales Compute Engine virtual machines on Google Cloud Platform. A developer uses it to provision VMs with full OS control, create managed instance groups with auto-healing and autoscaling, and cost-optimize with spot VMs. It includes machine-type references, snapshot policies, and Terraform config.88installs77Load Balancingload-balancing is a skill that configures load balancers and traffic distribution across application servers. It provides nginx configs (round-robin, weighted, sticky sessions, health checks), a full HAProxy production config with path-based routing and server drain commands, and AWS Application Load Balancer CLI setup, plus TLS termination. A developer uses it when distributing HTTP/HTTPS traffic across multiple backends for high availability.88installs78Model Serving KubernetesThis skill deploys ML models on Kubernetes using KServe and NVIDIA Triton Inference Server. It covers InferenceServices, canary deployments with traffic splitting, KEDA autoscaling, and GPU resource management for production serving. A developer uses it to serve scikit-learn, PyTorch, ONNX, or LLM models at scale with versioning and A/B testing. It matters for running inference reliably across multiple model versions on GPU clusters.88installs79Zero Trustzero-trust is a skill for implementing a zero-trust security architecture based on never trust, always verify. It covers identity-aware access with Cloudflare Access and OAuth2 Proxy, micro-segmentation, mTLS and device posture checks. A developer or security architect uses it when replacing perimeter VPN models or securing multi-cloud workloads with least privilege.88installs80Llm Cost Optimizationllm-cost-optimization is a skill that reduces LLM API and infrastructure costs through model selection, caching, batching, prompt compression, quantization and self-hosting. It shows how to track spend per team and model with LiteLLM, route by task complexity, use provider prompt caching and the OpenAI Batch API, and compress prompts with LLMLingua. A developer uses it when LLM spend is growing faster than revenue.87installs81Object StorageThis skill configures and manages object storage across AWS S3, GCS, and self-hosted MinIO. It covers CLI operations, bucket policies, lifecycle rules, versioning, encryption, and the MinIO client. A developer uses it for storing assets, backups, logs, or media, or standing up an S3-compatible store on-premises. It matters for managing durable object storage with proper access control and automated lifecycle transitions.87installs82Prompt Injection DefenseThis skill mitigates direct and indirect prompt injection in LLM chat apps, agentic workflows, and RAG pipelines. A developer uses it to sanitize input, detect known injection patterns, wrap untrusted retrieved documents in boundary markers, and validate tool calls against an allow-list. It applies a defense-in-depth pattern with instruction hierarchy and human approval for high-impact actions.87installs83Container RegistriesContainer Registries is a skill for storing, distributing, and managing container images across cloud and self-hosted registries. It covers authentication, tagging, push/pull, and repository policies for Amazon ECR, Azure ACR, Google Artifact Registry, Docker Hub, and GitHub Container Registry. A developer uses it when setting up image storage, retention policies, and access control for a container pipeline.86installs84Gpu Kubernetes OperationsA Claude skill for operating GPU-backed Kubernetes clusters that run AI inference and training. A developer uses it to install the NVIDIA GPU Operator, partition GPUs with MIG or time-slicing, build GPU-aware autoscaling, and monitor GPU health with DCGM and Prometheus. It targets Kubernetes 1.28+ clusters with NVIDIA GPUs like A100 and H100.86installs85Mdm Device ManagementThis skill is a practical guide to enrolling, securing, and managing company devices across macOS, Windows, iOS, and Android with MDM. It compares platforms like Jamf, Intune, Kandji, and Fleet, then walks through a self-hosted Fleet deployment with osquery policies. A developer or IT lead uses it when a growing team crosses ~10 people or needs SOC 2, HIPAA, or ISO 27001 endpoint evidence. It matters because manual laptop setup and encryption checks do not scale for remote or hybrid teams.86installs86Ollama StackThis skill deploys a local LLM stack with Ollama, Open WebUI, and LiteLLM for offline and privacy-first workflows. It covers installation, a model-selection guide with VRAM needs, a Docker Compose full stack, GPU-aware tuning, and an OpenAI-compatible API. A developer uses it to set up private inference, local AI dev environments, or air-gapped LLM deployments. It matters for prototyping and running models on personal or team hardware before committing to cloud LLM APIs.86installs87Pci Dss CompliancePCI DSS Compliance implements PCI DSS v4.0 requirements for protecting cardholder data across the Cardholder Data Environment. A developer uses it to scope the CDE, select the right Self-Assessment Questionnaire, and apply controls for network security, encryption, access control, logging, and testing. It also covers scope-reduction strategies like tokenization and P2PE.86installs88Policy As CodeThis skill implements policy-as-code with Open Policy Agent (Rego), Kyverno, and Checkov to enforce compliance on infrastructure-as-code changes. A developer uses it to block misconfigured Kubernetes workloads and Terraform resources in CI/CD before they deploy. It replaces manual approval gates with automated policy checks.86installs89Ai Red Teamingai-red-teaming is a skill that runs structured adversarial exercises against AI applications to find exploitable failure modes. A developer uses it before launching an LLM feature, evaluating a third-party model, or investigating a jailbreak incident. It provides a categorized adversarial prompt library, an automated test harness, and a risk register keyed to OWASP Top 10 for LLM Applications.85installs90Alerting OncallA skill for configuring production alerting and on-call management. It defines Prometheus alert rules, Alertmanager routing to Slack and PagerDuty, severity tiers, and escalation policies. A developer uses it when setting up alerting thresholds, on-call rotations, and incident response for a running service.85installs91Aws VpcThis skill designs and provisions AWS VPC networking with AWS CLI and Terraform. It covers multi-AZ public, private, and isolated data subnets, internet and NAT gateways, security groups, VPC endpoints, flow logs, and VPC peering. A developer uses it when setting up network infrastructure for AWS workloads. It includes a reference network architecture and connectivity troubleshooting.85installs92Cloudflare R2This skill manages Cloudflare R2 object storage. It covers bucket and object operations with Wrangler, the S3-compatible API via AWS CLI and boto3, presigned URLs, and R2 bindings in Workers and Pages Functions. A developer uses it for storing uploads, media, backups, or static assets without egress fees. It matters for low-cost, S3-compatible object storage that avoids vendor lock-in.85installs93Nfs StorageThis skill configures NFS servers and clients for network file sharing across Linux systems. It covers NFSv4 server setup, export options, client mounting via fstab and autofs, Kerberos security, performance tuning, and Kubernetes integration. A developer uses it to share directories across servers or provide ReadWriteMany storage for containerized workloads. It matters for centralizing shared storage across a fleet without moving to local disks.85installs94Startup It TroubleshootingProvides practical IT troubleshooting playbooks for startups where engineers double as the IT department, covering SSO lockouts, network problems, and account provisioning. A developer uses it when handling laptop, Wi-Fi, Google Workspace, or Okta incidents without dedicated IT staff.85installs95Aws IamA skill for managing AWS identity and access with least-privilege policies. It covers writing IAM policy JSON, creating roles for services, cross-account access, OIDC federation for CI/CD, and permission boundaries. A developer uses it to configure secure, scoped AWS access.84installs96Aws RdsA skill for provisioning and managing Amazon RDS relational databases. It covers Multi-AZ instances, subnet groups, parameter tuning, read replicas, cross-region disaster recovery, and backups. A developer uses it to deploy and operate managed PostgreSQL, MySQL, MariaDB, Oracle, or SQL Server databases with production-grade reliability.84installs97Business ContinuityThis skill develops and maintains business continuity plans for organizational resilience. It covers a governance-to-maintenance framework, Business Impact Analysis, criticality and RTO/RPO classification, communication plans, and BCP testing. A developer or ops lead uses it when building a formal BCP or preparing for continuity compliance audits. It matters for surviving outages and meeting SOC 2, ISO 27001, HIPAA, and FedRAMP requirements.84installs98CircleciThis skill configures CircleCI CI/CD pipelines. It covers config.yml structure, jobs and workflows, executors, orbs, dependency caching, workspaces, test-splitting parallelism, and manual approvals. A developer uses it when setting up or optimizing CircleCI builds and deployments. It matters for automating build, test, and deploy on the CircleCI platform.84installs99Gcp Cloud Functionsgcp-cloud-functions deploys event-driven serverless applications with Google Cloud Functions (Gen1 and Gen2). A developer uses it to build HTTP backends, react to Pub/Sub, Storage, and Firestore events, and run scheduled tasks without managing servers. It provides gcloud deploy commands, function examples, and Terraform config.84installs100Hipaa ComplianceA Claude skill for implementing HIPAA Security, Privacy, and Breach Notification Rule requirements for systems that handle electronic Protected Health Information. A developer uses it when configuring cloud infrastructure for HIPAA-eligible workloads, setting up encryption and access controls, and preparing for audits. It includes per-cloud technical safeguard checklists and BAA guidance.84installs101OpentelemetryOpenTelemetry is a skill for instrumenting applications and infrastructure with unified traces, metrics, and logs. A developer uses it to define semantic conventions, add SDK or auto-instrumentation, run an OpenTelemetry Collector to receive and export telemetry, and control cardinality and cost. It targets backends like Prometheus, Grafana, Tempo, Jaeger, and Datadog via OTLP.84installs102Runbook CreationThis skill creates operational runbooks, standard operating procedures, and troubleshooting guides for on-call engineers. A developer uses it with a structured template covering procedure, verification, rollback, troubleshooting, and escalation. It includes a worked database-failover runbook and reusable automation scripts.84installs103Access Reviewaccess-review is a skill that implements periodic access review and recertification workflows for AWS IAM, GitHub, Okta, and other identity providers. A developer uses it to run quarterly or annual reviews, flag inactive accounts and stale credentials, certify that access matches job roles, and produce evidence for auditors. It ships bash scripts that pull credential reports and generate CSV findings per system.83installs104Cdn SetupThis skill configures content delivery networks for fast global asset delivery. It covers AWS CloudFront distributions, Cloudflare cache rules, and Fastly with caching, invalidation, TLS termination, and edge logic. A developer uses it when serving static assets globally, offloading origin traffic, or adding edge caching to APIs. It matters for reducing latency and origin load.83installs105Semantic VersioningAutomates version numbering and changelog generation following SemVer principles. A developer uses it to wire up semantic-release or standard-version so version bumps and release notes derive from conventional commits. It also covers changelog tooling like conventional-changelog and git-cliff and GitHub Actions release jobs.83installs106Aws Ec2A skill for provisioning and managing Amazon EC2 compute. It covers launching instances, building launch templates, auto-scaling groups with spot instances, and instance-type selection. A developer uses it to deploy and scale compute for production, staging, and development workloads.82installs107Azure Monitor AuditThis skill configures Azure Monitor, Activity Log, and Log Analytics for auditing and compliance. It covers workspace creation, subscription and resource diagnostic settings, Azure Policy enforcement, KQL security investigation queries, and alert rules for brute-force and administrative events. A developer uses it to build centralized audit logging and compliance dashboards. It includes a setup checklist and best practices.82installs108Azure NetworkingThis skill designs Azure network infrastructure with Azure CLI and Terraform. It covers hub-spoke VNet topology, subnets, network security groups, VNet peering, private endpoints, Azure Firewall, and Application Gateway. A developer uses it to build the network foundation for Azure workloads. It provides production hub-spoke configurations for both CLI and Terraform.82installs109Change ManagementThis skill implements structured change management for production environments. It covers change classification, Change Advisory Board (CAB) workflows, emergency-change procedures, change-request templates, and CI/CD change tracking. A developer or release manager uses it when establishing change-control processes or approval gates for production changes. It matters for compliance with SOC 2 and ITIL and for reducing change-related incidents.82installs110Llm Gatewayllm-gateway is a skill that deploys a unified API gateway for LLM traffic across providers and self-hosted models. It centers on LiteLLM Proxy with an OpenAI-compatible API, plus Nginx/Traefik patterns, and covers rate limiting, virtual key management, semantic caching, fallback routing and cost tracking. A developer uses it to run multiple LLM backends behind one endpoint with centralized budgets and failover.82installs111Loki Loggingloki-logging is a skill that configures Grafana Loki for log aggregation and analysis. It covers deploying Loki with Promtail and Grafana via Docker Compose or Helm, Promtail scrape configs for system, Docker and JSON application logs, LogQL queries, and a Kubernetes Promtail DaemonSet. A developer uses it for lightweight, label-based log aggregation, especially in Kubernetes environments.82installs112Agent Observabilityagent-observability is a skill that instruments AI agents and LLM-backed services with tracing, metrics, and cost telemetry. A developer uses it to answer questions like p95 latency and per-request cost, to trace multi-step agent turns, and to alert on token-usage spikes. It provides Prometheus metric definitions, OpenTelemetry setup, structured logging, and PII redaction.81installs113Azure KeyvaultThis skill manages secrets, keys, and certificates in Azure Key Vault using Azure CLI, RBAC, and Terraform. It covers vault creation with soft-delete and purge protection, secret and key rotation, certificate handling, access policies, and integration with AKS, App Service, and Functions. A developer uses it for centralized secret management on Azure. It includes a DefaultAzureCredential integration example and troubleshooting.81installs114Block StorageThis skill helps an agent provision and manage block storage on Linux servers and AWS. It covers disk partitioning, ext4/XFS filesystem creation, LVM logical volumes, snapshots, software RAID, and AWS EBS volume creation. A developer uses it when adding or extending disks, setting up flexible storage with LVM, or attaching cloud block storage. It matters for keeping production storage reliable and expandable without downtime.81installs115Llm App Securityllm-app-security is a skill that hardens LLM-powered applications against prompt injection, data leakage, abuse and compliance violations. It maps the OWASP LLM Top 10 to concrete controls and provides input validation, injection-detection patterns, content moderation, output PII scrubbing, tenant isolation and rate limiting. A developer uses it when building chatbots, RAG pipelines or AI features that send user text to an LLM.81installs116Rag InfrastructureThis skill builds Retrieval-Augmented Generation infrastructure: document ingestion, embedding pipelines, vector storage, and grounded LLM responses. A developer uses it to set up chunking, hybrid dense-plus-sparse search, reranking, and a full RAG query pipeline over Qdrant. It targets knowledge-base Q&A and semantic search that reduce hallucinations with retrieved context.81installs117Azure FunctionsThis skill builds serverless applications on Azure Functions using Azure CLI and Functions Core Tools. It covers function app creation on Consumption and Premium plans, HTTP triggers and bindings, and code examples in Python and Node.js. A developer uses it to implement event-driven compute, APIs, webhooks, or scheduled tasks on Azure. It includes deployment and production best practices.80installs118Ebpf ObservabilityeBPF Observability is a skill for deep kernel-level observability using eBPF. It covers Cilium with Hubble for network flow observability, Tetragon for runtime security enforcement, and bpftrace for tracing syscalls and latency, all without modifying application code. A developer uses it to debug performance, capture L3/L4/L7 network flows, and monitor security at the kernel boundary.80installs119Feature Flagsfeature-flags implements feature flags for progressive feature rollout using LaunchDarkly, Unleash, or custom solutions. A developer uses it to control feature visibility, run A/B tests, and enable trunk-based development with kill switches. It ships code that gates features behind flags with targeting and percentage rollout rules.80installs120Vercel Deploymentsvercel-deployments is a skill for shipping frontend and full-stack apps on Vercel. It covers preview environments, edge functions, environment-variable separation across preview and production, custom domains and CI via GitHub Actions. A developer uses it when deploying Next.js, SvelteKit or static sites with zero-config CI/CD.80installs121Aws LambdaA skill for building and deploying serverless functions on AWS Lambda. It covers function creation, versions and aliases with canary routing, event source mappings, layers, and handler code patterns. A developer uses it to build event-driven applications, scheduled tasks, and lightweight APIs without managing servers.79installs122Azure SqlThis skill provisions and manages Azure SQL Database, Elastic Pools, and Cosmos DB using Azure CLI and Terraform. It covers server and database creation, firewall rules, geo-replication, backup strategies, performance tuning, and security hardening. A developer uses it to deploy managed relational or NoSQL databases on Azure. It includes serverless, business-critical, and hyperscale database examples.79installs123Cloudflare PagesThis skill deploys static sites and full-stack apps on Cloudflare Pages. It covers Wrangler CLI project setup, Git integration, automatic per-PR preview deployments, Pages Functions with KV/D1/R2 bindings, custom headers, and redirects. A developer uses it when deploying a frontend or full-stack project to Cloudflare's edge with previews and custom domains. It matters for shipping sites with zero-config CDN and TLS.79installs124Cloudflare Zero TrustThis skill secures access to internal services using Cloudflare Zero Trust. It covers cloudflared Tunnels, identity-aware Access policies, device posture checks, DNS filtering with Gateway, and service tokens for automation. A developer or security engineer uses it to replace VPN access to internal apps, SSH, or dashboards with policy-driven Zero Trust. It matters for securing internal tools without opening inbound ports.79installs125Gpu Server ManagementA Claude skill for provisioning and managing single NVIDIA GPU servers for AI inference and training. A developer uses it to install drivers, the CUDA toolkit, and the NVIDIA Container Toolkit, partition A100/H100 GPUs with MIG, tune the kernel, and monitor GPU health. It targets standalone Ubuntu or RHEL GPU servers rather than clusters.79installs126Azure VmsThis skill deploys and manages Azure Virtual Machines, availability sets, scale sets, and managed disks using Azure CLI and Terraform. It covers Linux and Windows VM creation, cloud-init, VM sizing guidance, disk management, and auto-scaling. A developer uses it to run full-control compute or legacy workloads on Azure. It includes a VM operations reference file and production Terraform configurations.78installs127Blue Green DeployThis skill configures zero-downtime deployment strategies for production systems. It covers blue-green, canary, and rolling deployments with traffic shifting, health checks, and rollback across Kubernetes, Istio, Argo Rollouts, and AWS ECS. A developer uses it when releasing to production without downtime or setting up instant rollbacks. It matters for reducing deployment risk on live services.78installs128Openclaw Local Mac MiniOpenClaw Local + Mac mini Setup covers running OpenClaw on a developer laptop or a dedicated Mac mini as an always-on local AI agent host. A developer uses it to clone and bootstrap the app, configure Docker Compose with optional Redis and Ollama services, and harden macOS for headless server operation. It also covers networking, monitoring, and launchd services for production-grade uptime.78installs129Ai Sre Incident Responseai-sre-incident-response is a skill that applies SRE incident-response practices to AI systems. A developer uses it when an LLM endpoint degrades, token spend spikes, a provider goes down, or safety guardrails fire abnormally. It provides an AI incident taxonomy, a severity framework, Prometheus alert rules, and response runbooks with fallback routing.77installs130Azure AksThis skill deploys and manages Azure Kubernetes Service clusters using Azure CLI, kubectl, Helm, and Terraform. It covers cluster creation, node pool management including GPU and spot pools, autoscaling, NGINX ingress, monitoring, and Azure AD integration. A developer uses it to run managed Kubernetes workloads on Azure. It includes private-cluster and Terraform provisioning examples.77installs131DatadogDatadog is a skill for setting up Datadog monitoring, APM, and observability. It covers agent installation on Linux, Docker, and Kubernetes, log collection, integration configs for databases and NGINX, and distributed tracing for Python, Node.js, and Go. A developer uses it to instrument infrastructure and applications with unified monitoring and alerting.77installs132Llm Cachingllm-caching is a skill that implements multi-layer caching for LLM applications to cut API cost and latency. It covers an exact-match Redis cache, a semantic-similarity cache using GPTCache or a custom Qdrant plus sentence-transformers setup, and provider-side prompt caching from Anthropic and OpenAI. A developer uses it when the same or similar queries are asked repeatedly and API costs need to drop.77installs133Rag Observability EvalsThis skill monitors and evaluates RAG systems as measurable production services. A developer uses it to run RAGAS metrics, score answer groundedness, detect hallucinations, and compute retrieval metrics like Recall@k and MRR. It supports continuous regression testing and quality gates for RAG pipeline changes.77installs134Ai Security Hardeningai-security-hardening is a skill that secures LLM and AI systems against prompt injection, jailbreaks, data leakage, and supply-chain threats in production. A developer uses it when deploying an LLM app handling sensitive data or pursuing SOC 2 or ISO 27001 compliance. It provides an AI threat model, injection-detection code, NeMo Guardrails config, PII scrubbing, and rate-limited API security.76installs135Arm TemplatesA skill for deploying Azure infrastructure as code with ARM templates and Bicep. It covers Bicep fundamentals for networks and VMs, modular deployments with parameters and outputs, and Azure CLI setup. A developer uses it to provision Azure-native resources without third-party IaC tooling.76installs136Cloudflare WorkersThis skill builds and deploys edge functions with Cloudflare Workers. It covers Wrangler project setup and commands, wrangler.toml config, API routers, middleware like rate limiting, cron jobs, and KV, D1, and R2 storage bindings. A developer uses it to build lightweight edge APIs, middleware, and scheduled jobs without managing servers. It matters for running low-latency serverless logic at the edge.76installs137PlanetscalePlanetScale is a skill for operating MySQL-compatible databases on PlanetScale with branching workflows and safe migrations. A developer uses it to create databases, work on schema changes in Git-like branches, and merge them via non-blocking deploy requests. It covers the pscale CLI, connection strings, Prisma integration, and a local Docker MySQL mirror.76installs138Ai Pipeline Orchestrationai-pipeline-orchestration is a skill that builds reliable AI/ML pipelines for data ingestion, batch inference, RAG indexing, and model training. A developer uses it to schedule recurring RAG re-indexing, run multi-step batch LLM workflows, and manage dependencies between data prep and model serving. It provides Prefect, Airflow, and Dagster patterns with retries, caching, and scheduling.75installs139CloudformationThis skill deploys AWS infrastructure with native CloudFormation. It covers template structure with parameters and conditions, stack operations, change sets for safe updates, nested stacks, drift detection, and cross-stack exports. A developer uses it for repeatable, parameterized AWS infrastructure as code and safe multi-environment deployments. It matters for managing AWS-native IaC with previewable, rollback-protected changes.75installs140Llm Fine Tuningllm-fine-tuning is a skill that sets up infrastructure to fine-tune open-source LLMs with QLoRA, LoRA and full fine-tuning. It covers Hugging Face TRL and Axolotl configs, distributed training with DeepSpeed or FSDP, DPO/RLHF alignment, and merging LoRA adapters for production serving. A developer uses it when adapting an LLM to domain-specific data such as legal, medical, code or support.75installs141Sbom Supply ChainThis skill generates, signs, and verifies SBOMs and provenance attestations to secure the software supply chain. A developer uses it to produce CycloneDX and SPDX SBOMs with Syft and cdxgen, match vulnerabilities with Grype and Trivy, and sign artifacts with Cosign keyless signing. It supports SLSA controls and compliance evidence for releases.75installs142Firebase App Platformfirebase-app-platform builds and operates apps on Firebase using Auth, Firestore, Cloud Functions, and Hosting. A developer uses it to ship mobile or web backends with real-time data sync, managed authentication, and serverless APIs. It provides Firestore security rules, auth flows, Cloud Functions, and deploy commands.74installs143Aws Cost OptimizationA skill for reducing AWS spend with FinOps controls. It covers Cost Explorer CLI queries, rightsizing and Savings Plans recommendations, budget and anomaly alerts, and finding unused resources. A developer uses it during cost reviews, when a bill spikes, or when planning commitment discounts.73installs144Convex BackendConvex Backend is a skill for building reactive, type-safe backends with Convex. It covers schema definition, real-time queries, mutations, actions that call external APIs, scheduled cron functions, and Clerk auth wired into a React client. A developer uses it to build real-time collaborative or AI apps without managing backend infrastructure.73installs145Llmops Platform Engineeringllmops-platform-engineering is a skill that designs production LLMOps platforms with CI/CD, model-promotion workflows, evaluation gates, rollback and governance. It provides a four-plane reference architecture, a GitHub Actions model-promotion pipeline with quality/safety/latency gates, threshold configs, and canary deployment. A developer uses it to build an internal platform for teams to deploy and manage LLM features safely.73installs146Openclaw Security HardeningOpenClaw Security Hardening reduces exposure in self-hosted OpenClaw deployments before opening access to teammates or external networks. A developer uses it to build a threat model, apply baseline host hardening, put a reverse proxy with TLS and rate limits in front, protect secrets and tokens, and segment network access into private, operator, and public tiers. It also covers detection, backups, and rollback drills.73installs147Mac Mini Llm Labmac-mini-llm-lab is a skill that configures a Mac mini as an always-on local LLM server. It covers system setup with Homebrew, Ollama and MLX model serving sized to unified memory, launchd auto-start, power-safe pmset settings, remote access via Tailscale, hardened SSH and a Caddy reverse proxy, plus Open WebUI and health monitoring. A developer uses it to build a private on-prem AI inference server on Apple Silicon.72installs148Saas Security PostureThis skill audits and hardens a company's SaaS tool stack. A developer or IT lead uses it to enforce SSO and MFA, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS. It supports SOC 2 preparation and post-incident hardening with command-driven checks.72installs149Mcp Server SecurityThis skill is a hardening guide for Model Context Protocol servers that expose tools to AI agents. It walks through transport encryption, OAuth 2.1 auth, tool authorization, input validation, and audit logging. A developer uses it before exposing an MCP server to agents in production or in a regulated environment. It matters because MCP servers execute real actions on real infrastructure and are a high-value attack surface.71installs150Multi Tenant Llm HostingThis skill designs multi-tenant LLM hosting platforms that share inference infrastructure across teams or customers without sacrificing isolation, performance, or cost governance. It covers vLLM multi-model serving on Kubernetes, per-tenant quotas, billing attribution, rate limiting, and noisy-neighbor protection. A developer uses it when building an internal or customer-facing LLM platform on shared GPU infrastructure. It matters because shared inference needs strong tenant identity, quotas, and per-tenant policy controls.71installs151Vllm Servervllm-server is a skill for deploying and operating vLLM inference servers for self-hosted open-source LLMs. It covers continuous batching, tensor parallelism, AWQ/GPTQ/FP8 quantization, LoRA adapters and OpenAI-compatible endpoints. A developer uses it when serving models like Llama or Mistral at scale and tuning throughput and latency.71installs152Ai Coding Agent Guardrailsai-coding-agent-guardrails is a skill that secures AI coding agents across engineering teams with permission boundaries, secret protection, and review gates. A developer uses it when onboarding Claude Code, Cursor, Copilot, or Codex into a team, especially where agents touch repos containing secrets or infrastructure. It provides CLAUDE.md restrictions, command allowlists, filesystem ACLs, and pre-commit secret scanning.70installs153Ai Inference Service Meshai-inference-service-mesh is a skill that applies service-mesh patterns to AI inference traffic across microservices. A developer uses it to enforce mTLS between gateway, retriever, reranker, and model services, apply traffic and egress policies, and run canary or A/B releases for model backends. It provides Istio PeerAuthentication, AuthorizationPolicy, and VirtualService manifests.70installs154Openclaw Deployment HardeningOpenClaw Deployment Hardening adds repeatable security gates around OpenClaw build and deployment workflows. A developer uses it to enforce dependency and image scans, secret scanning, SBOM generation, and artifact signing before promotion, then lock down container and Kubernetes runtime settings. It also defines post-deploy verification and an incident-ready rollback path.70installs155Identity Access ManagementA Claude skill for setting up centralized identity and access management for startup teams. A developer uses it to configure SSO, SCIM provisioning, and MFA across Google Workspace, Okta, or Azure AD (Entra ID). It covers organizational units, RBAC groups, MFA enforcement, and access governance for compliance and incident response.69installs156Vector Database Opsvector-database-ops is a skill for deploying and operating vector databases for AI search and RAG workloads. It covers choosing between Qdrant, Weaviate, pgvector and Pinecone, and configuring collections, HNSW/IVFFlat indexes, quantization and payload filtering. A developer uses it when standing up or tuning vector storage for semantic search or recommendation systems.69installs157Model Registry GovernanceThis skill sets up a model registry as a trustworthy system of record for model artifacts, prompts, adapters, and evaluation evidence. It covers MLflow registry setup, a required metadata schema, policy-driven promotion, and lifecycle policies for retirement. A developer uses it when centralizing model governance or preparing for compliance audits of AI systems. It matters because every production model needs traceability to source code, data, and evaluation results.68installs158Model Supply Chain SecurityThis skill secures the AI model supply chain against tampering, dependency compromise, and untrusted artifact promotion. It covers cosign signing of models and containers, SLSA provenance, SBOM generation with syft, model cards, and registry scanning. A developer uses it when pulling pretrained models from public registries or building model-serving containers for production. It matters because poisoned weights, compromised pipelines, and pickle deserialization attacks threaten ML systems.68installs159Devcontainers NixDev Containers & Nix is a skill for building reproducible, portable development environments. It covers Dev Containers (devcontainer.json with features and Docker Compose), Nix flakes with pinned inputs, and Devbox with direnv auto-activation. A developer uses it to standardize toolchains across a team and eliminate works-on-my-machine drift.67installs160Platform EngineeringPlatform Engineering covers building internal developer platforms with self-service infrastructure, golden paths, and developer portals. A developer uses it to stand up a Backstage portal, provision cloud infrastructure declaratively with Crossplane, and expose platform APIs that teams consume without touching low-level cloud resources. It targets reducing cognitive load and standardizing provisioning across teams.66installs161Opentofu MigrationOpenTofu Migration guides moving infrastructure-as-code from HashiCorp Terraform to the open-source OpenTofu fork. A developer uses it to verify state compatibility, replace terraform CLI commands with tofu, regenerate provider lock files, and update CI/CD pipelines in GitHub Actions or GitLab CI. It also covers OpenTofu-specific features like native state encryption and early variable evaluation.65installs162Supply Chain Attack ResponseDetects, responds to, and prevents software supply chain attacks on package registries, container images, and CI/CD pipelines. A developer uses it to audit lockfiles, verify artifact provenance with Sigstore and SLSA, and run an emergency playbook when a dependency is compromised. It covers npm, pip, and cargo ecosystems end to end.65installs163Sre DashboardsDesigns SRE dashboards that surface reliability, latency, error, saturation, and capacity signals across services. A developer uses it to build layered observability views for SLO health, incident response, and executive reliability reporting. It provides golden-signal and error-budget panels plus ready PromQL snippets.33installs