---
title: Top DevOps & Infrastructure Skills for Codex
slug: top-devops-infra-skills-for-codex
type: category-agent-cut
category: devops-infra
agent: codex
canonical: https://top-agent-skills.com/top-devops-infra-skills-for-codex
verified: 8
unverified: 13
updated: 2026-09-30
---

# Top DevOps & Infrastructure Skills for Codex

What is verified on Codex in this category is the operational half, not the provisioning half: GitGuardian's secret-scanning skill and Sentry's error-handling skill for the two failures that actually page people, Anthropic's deploy-checklist and incident-response for the ship-and-respond loop, plus Redis caching patterns and Firebase's own hosting skill. The Terraform and Kubernetes skills that anchor this category on Cursor are not verified on Codex — install those only after testing them yourself.

## Verified on Codex CLI (8)

### 1. hostinger-api-mcp-skills — score 63/100 (verified-org)

The jobs, not the endpoints: migrate a live site, connect the domain, keep WordPress patched.

- Best for: Moving an existing site onto Hostinger and running it afterwards — migration, custom domain with SSL, WordPress updates, and an account-wide health audit.
- Not ideal for: Anyone not on Hostinger, and anyone wanting a reference for the raw API — these skills drive the MCP server toward an outcome; hostinger-agent-skills is the endpoint-level knowledge base.
- Publisher: Hostinger · MIT
- Verified on: claude-code, codex

```bash
npx skills add hostinger/api-mcp-server --skill deploy-to-hosting --yes
```

Full entry: https://top-agent-skills.com/skill/hostinger-api-mcp-skills (https://top-agent-skills.com/skill/hostinger-api-mcp-skills.md)

### 2. firebase-hosting-basics — score 61/100 (verified-org)

Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting.

- Best for: Web apps already in the Google/Firebase ecosystem (Firestore, Auth) that want the agent to handle hosting setup and the deploy step without leaving chat.
- Not ideal for: Static-only sites with no Firebase dependency — a generic static host (Pages, Netlify) is simpler and avoids the Firebase project requirement.
- Publisher: Firebase (Google) · Apache-2.0
- Verified on: claude-code, cursor, codex, gemini-cli, antigravity

```bash
claude plugin marketplace add firebase/agent-skills
```

Full entry: https://top-agent-skills.com/skill/firebase-hosting (https://top-agent-skills.com/skill/firebase-hosting.md)

### 3. hostinger-agent-skills — score 56/100 (verified-org)

The registrar half of the stack: buy the domain, set the DNS, stand up the site — from one plugin.

- Best for: Registering a domain and pointing its DNS at a site without leaving the terminal, on an account you already own.
- Not ideal for: Anyone not hosting at Hostinger — every endpoint is Hostinger-account-scoped, so it manages your portfolio there and nothing else.
- Publisher: Hostinger · MIT
- Verified on: claude-code, codex

```bash
npx skills add hostinger/hostinger-agent-skills --skill domains --yes
```

Full entry: https://top-agent-skills.com/skill/hostinger-agent-skills (https://top-agent-skills.com/skill/hostinger-agent-skills.md)

### 4. deploy-checklist — score 51/100 (official-anthropic)

The pre-ship checklist that catches the embarrassing stuff.

- Best for: Shipping a release with migrations, feature flags, or anything that needs a documented rollback path.
- Publisher: Anthropic · MIT
- Verified on: claude-code, cursor, codex, antigravity

```bash
claude plugin install engineering
```

Full entry: https://top-agent-skills.com/skill/deploy-checklist (https://top-agent-skills.com/skill/deploy-checklist.md)

### 5. incident-response — score 51/100 (official-anthropic)

Incident triage + comms + blameless postmortem in one harness.

- Best for: Active production incidents and the postmortem afterward.
- Publisher: Anthropic · MIT
- Verified on: claude-code, cursor, codex, antigravity

```bash
claude plugin install engineering
```

Full entry: https://top-agent-skills.com/skill/incident-response (https://top-agent-skills.com/skill/incident-response.md)

### 6. scan-secrets — score 50/100 (verified-org)

GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.

Full entry: https://top-agent-skills.com/skill/gitguardian-secret-scanning (https://top-agent-skills.com/skill/gitguardian-secret-scanning.md)

### 7. redis-cache-patterns — score 49/100 (verified-org)

Caching without the bugs. Invalidation, write-through, cache-aside, distributed locks.

Full entry: https://top-agent-skills.com/skill/redis-cache-patterns (https://top-agent-skills.com/skill/redis-cache-patterns.md)

### 8. sentry-error-handling — score 48/100 (verified-org)

Sentry the right way. Source maps, releases, breadcrumbs, performance, structured tags.

Full entry: https://top-agent-skills.com/skill/sentry-error-handling (https://top-agent-skills.com/skill/sentry-error-handling.md)

## In DevOps & Infrastructure but NOT verified on Codex CLI (13)

These may well work — the SKILL.md format is shared. They are listed as unverified because this site lists an agent only where the install was run or the publisher documents a path for it.

- k8s-security-policies — Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh. (https://top-agent-skills.com/skill/k8s-security-policies)
- terraform-claude-skill — Terraform expertise on tap. State inspection, module validators, safety-first IaC. (https://top-agent-skills.com/skill/terraform-claude-skill)
- devops-engineer — Senior DevOps engineer persona — CI/CD, containers, blue-green/canary, IaC across clouds. (https://top-agent-skills.com/skill/devops-engineer)
- ios-simulator-skill — Drive the iOS Simulator from the agent loop. Build and test iOS apps. (https://top-agent-skills.com/skill/ios-simulator-skill)
- expo-skills — Expo workflows: navigation, EAS, OTA, native modules. (https://top-agent-skills.com/skill/expo-skills)
- netlify-deploy — Netlify-authored deploy flow. Auth, site linking, Deploy Previews, production promotes. (https://top-agent-skills.com/skill/netlify-deploy)
- cloudflare — Cloudflare-authored. Workers and Pages deploys, Wrangler config, KV/D1/R2 from chat. (https://top-agent-skills.com/skill/cloudflare-platform)
- snyk-fix — The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass. (https://top-agent-skills.com/skill/snyk-fix)
- postgres-database-migration — Zero-downtime Postgres migrations, with the locking behaviour spelled out — which ALTER TABLE takes an AccessExclusiveLock and what to do instead. (https://top-agent-skills.com/skill/postgres-migrations)
- azure-resource-visualizer — Diagrams generated from live infrastructure rather than from a prompt — it reads the actual resource group and draws what is really there. (https://top-agent-skills.com/skill/azure-resource-visualizer)
- update-config — Edit settings.json safely. Hooks, perms, env, behaviors. (https://top-agent-skills.com/skill/update-config)
- loop — Recurring task runner. Self-paced or interval-based. (https://top-agent-skills.com/skill/loop)
- schedule — Cron for remote Claude Code agents. Set it and forget it. (https://top-agent-skills.com/skill/schedule)

## Common question

**Why does this list have no Terraform or Kubernetes skill?**

Because neither has been verified on Codex, and this catalog lists tested compatibility rather than the assumption that a SKILL.md file works everywhere. terraform-claude-skill and k8s-security-policies are catalogued with Claude Code and Cursor compatibility; they may well work in Codex, but until that is run they stay off this page. The category page shows the full set with per-agent badges.

---

_Top Agent Skills. Machine-readable twin of https://top-agent-skills.com/top-devops-infra-skills-for-codex._
