bagelhole/devops-security-agent-skills
59 skills · 5,380 total installs
$npx skills add bagelhole/devops-security-agent-skillsSkillInstalls
docker-composeDefine and run multi-container Docker applications using Docker Compose.docker-managementBuild, optimize, and troubleshoot Docker containers and images.prometheus-grafanaSet up metrics collection and visualization with Prometheus and Grafana.audit-loggingImplement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.kustomizeCustomize Kubernetes manifests without templating using Kustomize.gdpr-complianceImplement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.kubernetes-opsDeploy, scale, and manage Kubernetes workloads. Create deployments, services, and configurations, manage cluster resources, troubleshoot pods, and implement…github-actionsBuild, test, and deploy applications using GitHub Actions workflows. Create CI/CD pipelines, configure runners, manage secrets, and automate software delivery.podmanManage containers using Podman, the daemonless container engine. Run rootless containers, create pods, manage images, and use Docker-compatible commands.openshiftManage Red Hat OpenShift clusters and deployments. Configure projects, routes, builds, and deploy applications using OpenShift-specific features.soc2-complianceImplement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.git-workflowImplement Git branching strategies, PR workflows, and release management patterns.aws-cloudtrailConfigure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.vendor-managementImplement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.jenkinsCreate and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds.helm-chartsCreate, manage, and deploy Helm charts for Kubernetes package management.new-relicConfigure New Relic observability platform for infrastructure and application monitoring.disaster-recoveryImplement disaster recovery strategies and runbooks. Configure RPO/RTO targets and failover procedures. Use when planning for business continuity.argocd-gitopsImplement GitOps with ArgoCD for declarative Kubernetes deployments.incident-managementImplement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews.iso27001-complianceImplement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.agent-evalsBuild automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates.azure-devopsSet up Azure Pipelines for CI/CD, configure build and release pipelines, manage Azure DevOps projects, and integrate with Azure services.asset-inventoryMaintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.elk-stackDeploy and manage the ELK Stack (Elasticsearch, Logstash, Kibana) for log aggregation and analysis.gitlab-ciConfigure GitLab CI/CD pipelines and runners for automated building, testing, and deployment.fedramp-complianceImplement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring.gcp-audit-logsConfigure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.model-serving-kubernetesDeploy ML models on Kubernetes with KServe (formerly KFServing) and NVIDIA Triton Inference Server.llm-cost-optimizationReduce LLM API and infrastructure costs through model selection, prompt caching, batching, caching, quantization, and self-hosting strategies.container-registriesManage container registries including ECR, ACR, GCR, and Docker Hub.pci-dss-complianceImplement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.policy-as-codeImplement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure.alerting-oncallSet up alerting rules, configure on-call rotations, and manage incident response workflows.business-continuityDevelop business continuity plans and impact analysis. Implement BCP testing and communication procedures. Use when building organizational resilience.circleciConfigure CircleCI workflows and orbs for continuous integration and deployment.hipaa-complianceImplement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.opentelemetryInstrument applications and infrastructure with OpenTelemetry for unified traces, metrics, and logs.runbook-creationCreate operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures.access-reviewConduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.semantic-versioningAutomate versioning and changelog generation using semantic versioning principles. Configure release automation, version bumping, and changelog tools.azure-monitor-auditConfigure Azure Monitor and Activity Log for auditing. Set up diagnostic settings and log analytics. Use when auditing Azure activity.change-managementImplement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.loki-loggingConfigure Grafana Loki for log aggregation and analysis. Set up Promtail for log collection, write LogQL queries, and integrate with Grafana for visualization.agent-observabilityInstrument AI agents with tracing, token metrics, latency, and cost visibility. Use for reliability and debugging.ebpf-observabilityUse eBPF for deep kernel-level observability — trace syscalls, network flows, and application behavior without code changes using Cilium, Tetragon, and…feature-flagsImplement feature flags for progressive feature rollout using LaunchDarkly, Unleash, or custom solutions.blue-green-deployConfigure zero-downtime deployment strategies including blue-green, canary, and rolling deployments.ai-sre-incident-responseBuild AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.datadogImplement Datadog monitoring and APM for infrastructure and applications.llm-cachingImplement multi-layer LLM caching with exact match, semantic similarity, and provider-side prompt caching.rag-observability-evalsMonitor and evaluate RAG systems with retrieval quality metrics, groundedness checks, hallucination detection, and continuous regression testing.ai-pipeline-orchestrationOrchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster.aws-cost-optimizationReduce AWS spend with rightsizing, autoscaling, commitment planning, and storage lifecycle policies.llmops-platform-engineeringBuild production LLMOps platforms with CI/CD, model promotion workflows, evaluation gates, rollback, and governance across cloud and self-hosted inference.model-registry-governanceEstablish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.devcontainers-nixCreate reproducible development environments with Dev Containers, Nix flakes, and Devbox for consistent toolchains across teams.platform-engineeringBuild internal developer platforms (IDPs) with self-service infrastructure, golden paths, and developer portals using Backstage, Crossplane, and score.sre-dashboardsDesign and operationalize SRE dashboards that surface reliability, latency, error, saturation, and capacity signals across services.