Updated 4mo ago
by BagelHole
DevOps-Security-Agent-Skills
Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and incident response—plus ready-to-run scripts, templates, and playbooks for SRE, platform, and security teams.
1.2k GitHub stars (1,162)
+47 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | +3 |
| Sep 29 | +4 |
| Sep 30 | +4 |
| Oct 1 | 0 |
| Oct 2 | +2 |
| Oct 3 | +2 |
| Oct 4 | +3 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | +7 |
| Oct 8 | +1 |
| Oct 9 | +3 |
| Oct 10 | +7 |
| Oct 11 | +2 |
| Oct 12 | +1 |
| Oct 13 | +1 |
| Oct 14 | +4 |
| Oct 15 | +2 |
| Oct 16 | 0 |
- 30 skills (30 skills found in its SKILL.md files)
- 165 forks (165 forks)
- 4mo ago last update (Last updated 4mo ago)
Install
Skills CLI
npx skills add BagelHole/DevOps-Security-Agent-Skills
Asks which skills and agents to install. Just one: npx skills add BagelHole/DevOps-Security-Agent-Skills --skill audit-logging — add -g for every project.
Claude Code
git clone https://github.com/BagelHole/DevOps-Security-Agent-Skillscp -r "DevOps-Security-Agent-Skills/compliance/auditing/audit-logging" ~/.claude/skills/
Copies the audit-logging skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add BagelHole/DevOps-Security-Agent-Skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 30 of 163 files.
-
audit-logging
Implement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.
compliance/auditing/audit-logging/SKILL.md on GitHub (opens in a new tab) -
aws-cloudtrail
Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.
compliance/auditing/aws-cloudtrail/SKILL.md on GitHub (opens in a new tab) -
azure-monitor-audit
Configure Azure Monitor and Activity Log for auditing. Set up diagnostic settings and log analytics. Use when auditing Azure activity.
compliance/auditing/azure-monitor-audit/SKILL.md on GitHub (opens in a new tab) -
gcp-audit-logs
Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.
compliance/auditing/gcp-audit-logs/SKILL.md on GitHub (opens in a new tab) -
business-continuity
Develop business continuity plans and impact analysis. Implement BCP testing and communication procedures. Use when building organizational resilience.
compliance/continuity/business-continuity/SKILL.md on GitHub (opens in a new tab) -
disaster-recovery
Implement disaster recovery strategies and runbooks. Configure RPO/RTO targets and failover procedures. Use when planning for business continuity.
compliance/continuity/disaster-recovery/SKILL.md on GitHub (opens in a new tab) -
incident-management
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
compliance/continuity/incident-management/SKILL.md on GitHub (opens in a new tab) -
runbook-creation
Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.
compliance/continuity/runbook-creation/SKILL.md on GitHub (opens in a new tab) -
fedramp-compliance
Implement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.
compliance/frameworks/fedramp-compliance/SKILL.md on GitHub (opens in a new tab) -
gdpr-compliance
Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.
compliance/frameworks/gdpr-compliance/SKILL.md on GitHub (opens in a new tab) -
hipaa-compliance
Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.
compliance/frameworks/hipaa-compliance/SKILL.md on GitHub (opens in a new tab) -
iso27001-compliance
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
compliance/frameworks/iso27001-compliance/SKILL.md on GitHub (opens in a new tab) -
pci-dss-compliance
Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.
compliance/frameworks/pci-dss-compliance/SKILL.md on GitHub (opens in a new tab) -
soc2-compliance
Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
compliance/frameworks/soc2-compliance/SKILL.md on GitHub (opens in a new tab) -
access-review
Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.
compliance/governance/access-review/SKILL.md on GitHub (opens in a new tab) -
asset-inventory
Maintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.
compliance/governance/asset-inventory/SKILL.md on GitHub (opens in a new tab) -
change-management
Implement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.
compliance/governance/change-management/SKILL.md on GitHub (opens in a new tab) -
policy-as-code
Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure. Use when enforcing compliance through automation.
compliance/governance/policy-as-code/SKILL.md on GitHub (opens in a new tab) -
vendor-management
Implement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.
compliance/governance/vendor-management/SKILL.md on GitHub (opens in a new tab) -
agent-evals
Build automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates. Use when shipping agent features, validating prompt changes, or gating deployments on quality.
devops/ai/agent-evals/SKILL.md on GitHub (opens in a new tab) -
agent-observability
Instrument AI agents with tracing, token metrics, latency, and cost visibility. Use for reliability and debugging.
devops/ai/agent-observability/SKILL.md on GitHub (opens in a new tab) -
ai-pipeline-orchestration
Orchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster. Build reliable, observable, and retriable workflows for production AI systems.
devops/ai/ai-pipeline-orchestration/SKILL.md on GitHub (opens in a new tab) -
ai-sre-incident-response
Build AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.
devops/ai/ai-sre-incident-response/SKILL.md on GitHub (opens in a new tab) -
llm-caching
Implement multi-layer LLM caching with exact match, semantic similarity, and provider-side prompt caching. Reduce API costs by 30–70%, cut latency, and improve throughput using Redis, GPTCache, and provider caching APIs.
devops/ai/llm-caching/SKILL.md on GitHub (opens in a new tab) -
llm-cost-optimization
Reduce LLM API and infrastructure costs through model selection, prompt caching, batching, caching, quantization, and self-hosting strategies. Track spend by team and model, set budgets, and implement cost-aware routing.
devops/ai/llm-cost-optimization/SKILL.md on GitHub (opens in a new tab) -
llmops-platform-engineering
Build production LLMOps platforms with CI/CD, model promotion workflows, evaluation gates, rollback, and governance across cloud and self-hosted inference.
devops/ai/llmops-platform-engineering/SKILL.md on GitHub (opens in a new tab) -
model-registry-governance
Establish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.
devops/ai/model-registry-governance/SKILL.md on GitHub (opens in a new tab) -
rag-observability-evals
Monitor and evaluate RAG systems with retrieval quality metrics, groundedness checks, hallucination detection, and continuous regression testing.
devops/ai/rag-observability-evals/SKILL.md on GitHub (opens in a new tab) -
azure-devops
Set up Azure Pipelines for CI/CD, configure build and release pipelines, manage Azure DevOps projects, and integrate with Azure services. Use when working with Azure DevOps Services or Server for enterprise DevOps workflows.
devops/ci-cd/azure-devops/SKILL.md on GitHub (opens in a new tab) -
circleci
Configure CircleCI workflows and orbs for continuous integration and deployment. Create config.yml pipelines, use orbs for reusable configurations, and optimize build performance. Use when working with CircleCI for CI/CD automation.
devops/ci-cd/circleci/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.