Skills Explorer Add Skills

devops-engineer

An agent skill by Jeffallan, from Jeffallan/claude-skills. Tags: automation, cli, devops, docker, kubernetes, terraform.

What it does

Creates Dockerfiles, configures CI/CD pipelines, writes Kubernetes manifests, and generates Terraform/Pulumi infrastructure templates. Handles deployment automation, GitOps configuration, incident response runbooks, and internal developer platform tooling. Use when setting up CI/CD pipelines, containerizing applications, managing infrastructure as code, deploying to Kubernetes clusters, configuring cloud platforms, automating releases, or responding to production incidents. Invoke for pipelines, Docker, Kubernetes, GitOps, Terraform, GitHub Actions, on-call, or platform engineering.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add Jeffallan/claude-skills --skill devops-engineer

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/Jeffallan/claude-skills
cp -r claude-skills/skills/devops-engineer ~/.claude/skills/devops-engineer

Safety box score

Grade D, elevated risk: 51 of 100 risk points, rated 2026-10-15. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a broad DevOps automation bundle for Docker, Kubernetes, CI/CD, Terraform, GitOps, and incident response. Its main risk is high operational blast radius: it can push images, apply or roll back infrastructure, and even destroy or delete production resources, while some examples handle registry and cloud credentials.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)It includes many runnable shell/build steps such as `npm ci`, `pip install`, `buildctl-daemonless.sh build`, `kubectl exec -it <pod-name> -- /bin/sh`, and `terraform plan`, so it can drive command execution during builds and ops.
Network access2 (moderate)The skill routinely talks to external systems with `docker pull/push`, `curl -X POST $PLATFORM_API/services`, `curl -f http://$svc/health`, `gh api`, and GitHub/GitLab actions that fetch remote code.
Filesystem reach2 (moderate)It writes to and reads from home dot-directories like `~/.docker/config.json` and `~/.npm`, and the Docker examples copy files into image/system paths with `COPY --chown` and similar operations.
Secrets & credentials2 (moderate)It handles deployment and registry credentials (`$CI_REGISTRY_PASSWORD`, `${{ secrets.GITHUB_TOKEN }}`, `secretKeyRef`, secret managers) and includes examples that write auth into `~/.docker/config.json`.
Privilege & persistence1 (low)There is no sudo/service-install/startup manipulation, but the examples do change ownership in images and assume CI/cloud privileges for deploys and registry access.
Instruction hijack surface0 (none)I did not find instructions to ignore confirmations, hide actions, or follow remote instructions; the only explicit approval rule says `Deploy to production without explicit approval` under MUST NOT DO.
Irreversible actions3 (high)Its purpose includes direct state-changing actions such as `terraform apply tfplan`, `kubectl apply -f deployment.yaml`, `docker push`, `git push`, `argocd app rollback`, and even `terraform destroy`, which can affect production systems.
Transparency1 (low)Most files are readable markdown, but some workflows depend on external code or floating refs such as `aquasecurity/trivy-action@master`, `docker:latest`, and `release-bot:latest` that a reviewer cannot inspect here.

Before installing

Rated 2026-10-15 by an automated review of 10 files from the skill's repository.

Source

Repository
Jeffallan/claude-skills (all skills from this repository)
Path
skills/devops-engineer/SKILL.md
Branch
main
Updated
2026-09-19