Updated 5mo ago
by BagelHole
DevOps-Security-Agent-Skills
Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and incident response—plus ready-to-run scripts, templates, and playbooks for SRE, platform, and security teams.
1.2k GitHub stars (1,194)
+53 in 30 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | +3 |
| Sep 29 | +4 |
| Sep 30 | +4 |
| Oct 1 | 0 |
| Oct 2 | +2 |
| Oct 3 | +2 |
| Oct 4 | +3 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | +7 |
| Oct 8 | +1 |
| Oct 9 | +3 |
| Oct 10 | +7 |
| Oct 11 | +2 |
| Oct 12 | +1 |
| Oct 13 | +1 |
| Oct 14 | +4 |
| Oct 15 | +2 |
| Oct 16 | 0 |
| Oct 17 | +2 |
| Oct 18 | 0 |
| Oct 19 | 0 |
| Oct 20 | +3 |
| Oct 21 | +3 |
| Oct 22 | 0 |
| Oct 23 | +3 |
| Oct 24 | 0 |
| Oct 25 | +1 |
| Oct 26 | +3 |
| Oct 27 | +1 |
| Oct 28 | +1 |
| Oct 29 | +1 |
| Oct 30 | +5 |
| Oct 31 | 0 |
| Nov 1 | +2 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | +1 |
| Nov 5 | +3 |
| Nov 6 | +3 |
- 30 skills (30 skills found in its SKILL.md files)
- 171 forks (171 forks)
- 5mo ago last update (Last updated 5mo ago)
Install
Skills CLI
npx skills add BagelHole/DevOps-Security-Agent-Skills
Asks which skills and agents to install. Just one: npx skills add BagelHole/DevOps-Security-Agent-Skills --skill audit-logging — add -g for every project.
Claude Code
git clone https://github.com/BagelHole/DevOps-Security-Agent-Skillscp -r "DevOps-Security-Agent-Skills/compliance/auditing/audit-logging" ~/.claude/skills/
Copies the audit-logging skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add BagelHole/DevOps-Security-Agent-Skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 30 of 163 files.
-
audit-logging
Implement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.
compliance/auditing/ on GitHub (opens in a new tab)audit-logging/ SKILL.md -
aws-cloudtrail
Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.
compliance/auditing/ on GitHub (opens in a new tab)aws-cloudtrail/ SKILL.md -
azure-monitor-audit
Configure Azure Monitor and Activity Log for auditing. Set up diagnostic settings and log analytics. Use when auditing Azure activity.
compliance/auditing/ on GitHub (opens in a new tab)azure-monitor-audit/ SKILL.md -
gcp-audit-logs
Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.
compliance/auditing/ on GitHub (opens in a new tab)gcp-audit-logs/ SKILL.md -
business-continuity
Develop business continuity plans and impact analysis. Implement BCP testing and communication procedures. Use when building organizational resilience.
compliance/continuity/ on GitHub (opens in a new tab)business-continuity/ SKILL.md -
disaster-recovery
Implement disaster recovery strategies and runbooks. Configure RPO/RTO targets and failover procedures. Use when planning for business continuity.
compliance/continuity/ on GitHub (opens in a new tab)disaster-recovery/ SKILL.md -
incident-management
Implement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.
compliance/continuity/ on GitHub (opens in a new tab)incident-management/ SKILL.md -
runbook-creation
Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.
compliance/continuity/ on GitHub (opens in a new tab)runbook-creation/ SKILL.md -
fedramp-compliance
Implement FedRAMP requirements for federal cloud services. Configure NIST 800-53 controls and continuous monitoring. Use when providing cloud services to US federal agencies.
compliance/frameworks/ on GitHub (opens in a new tab)fedramp-compliance/ SKILL.md -
gdpr-compliance
Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design. Use when processing EU personal data.
compliance/frameworks/ on GitHub (opens in a new tab)gdpr-compliance/ SKILL.md -
hipaa-compliance
Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.
compliance/frameworks/ on GitHub (opens in a new tab)hipaa-compliance/ SKILL.md -
iso27001-compliance
Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management. Use when implementing enterprise security frameworks.
compliance/frameworks/ on GitHub (opens in a new tab)iso27001-compliance/ SKILL.md -
pci-dss-compliance
Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.
compliance/frameworks/ on GitHub (opens in a new tab)pci-dss-compliance/ SKILL.md -
soc2-compliance
Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
compliance/frameworks/ on GitHub (opens in a new tab)soc2-compliance/ SKILL.md -
access-review
Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.
compliance/governance/ on GitHub (opens in a new tab)access-review/ SKILL.md -
asset-inventory
Maintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.
compliance/governance/ on GitHub (opens in a new tab)asset-inventory/ SKILL.md -
change-management
Implement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.
compliance/governance/ on GitHub (opens in a new tab)change-management/ SKILL.md -
policy-as-code
Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure. Use when enforcing compliance through automation.
compliance/governance/ on GitHub (opens in a new tab)policy-as-code/ SKILL.md -
vendor-management
Implement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.
compliance/governance/ on GitHub (opens in a new tab)vendor-management/ SKILL.md -
agent-evals
Build automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates. Use when shipping agent features, validating prompt changes, or gating deployments on quality.
devops/ai/ on GitHub (opens in a new tab)agent-evals/ SKILL.md -
agent-observability
Instrument AI agents with tracing, token metrics, latency, and cost visibility. Use for reliability and debugging.
devops/ai/ on GitHub (opens in a new tab)agent-observability/ SKILL.md -
ai-pipeline-orchestration
Orchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster. Build reliable, observable, and retriable workflows for production AI systems.
devops/ai/ on GitHub (opens in a new tab)ai-pipeline-orchestration/ SKILL.md -
ai-sre-incident-response
Build AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.
devops/ai/ on GitHub (opens in a new tab)ai-sre-incident-response/ SKILL.md -
llm-caching
Implement multi-layer LLM caching with exact match, semantic similarity, and provider-side prompt caching. Reduce API costs by 30–70%, cut latency, and improve throughput using Redis, GPTCache, and provider caching APIs.
devops/ai/ on GitHub (opens in a new tab)llm-caching/ SKILL.md -
llm-cost-optimization
Reduce LLM API and infrastructure costs through model selection, prompt caching, batching, caching, quantization, and self-hosting strategies. Track spend by team and model, set budgets, and implement cost-aware routing.
devops/ai/ on GitHub (opens in a new tab)llm-cost-optimization/ SKILL.md -
llmops-platform-engineering
Build production LLMOps platforms with CI/CD, model promotion workflows, evaluation gates, rollback, and governance across cloud and self-hosted inference.
devops/ai/ on GitHub (opens in a new tab)llmops-platform-engineering/ SKILL.md -
model-registry-governance
Establish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.
devops/ai/ on GitHub (opens in a new tab)model-registry-governance/ SKILL.md -
rag-observability-evals
Monitor and evaluate RAG systems with retrieval quality metrics, groundedness checks, hallucination detection, and continuous regression testing.
devops/ai/ on GitHub (opens in a new tab)rag-observability-evals/ SKILL.md -
azure-devops
Set up Azure Pipelines for CI/CD, configure build and release pipelines, manage Azure DevOps projects, and integrate with Azure services. Use when working with Azure DevOps Services or Server for enterprise DevOps workflows.
devops/ci-cd/ on GitHub (opens in a new tab)azure-devops/ SKILL.md -
circleci
Configure CircleCI workflows and orbs for continuous integration and deployment. Create config.yml pipelines, use orbs for reusable configurations, and optimize build performance. Use when working with CircleCI for CI/CD automation.
devops/ci-cd/ on GitHub (opens in a new tab)circleci/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.