{
  "$schema": "https://top-agent-skills.com/schemas/catalog.v1.json",
  "type": "primary-category",
  "slug": "devops-infra",
  "title": "DevOps & Infrastructure",
  "shortTitle": "DevOps",
  "description": "Terraform, AWS/GCP/Azure, CI/CD pipelines, container management, IaC patterns.",
  "canonical": "https://top-agent-skills.com/top-skills-for-devops-infra",
  "alternates": {
    "html": "https://top-agent-skills.com/top-skills-for-devops-infra",
    "markdown": "https://top-agent-skills.com/top-skills-for-devops-infra.md",
    "json": "https://top-agent-skills.com/top-skills-for-devops-infra.json"
  },
  "rubricVersion": "1.0",
  "methodology": "https://top-agent-skills.com/about/methodology",
  "contentLastUpdated": "2026-08-19",
  "count": 20,
  "topPick": {
    "slug": "firebase-hosting",
    "name": "firebase-hosting-basics",
    "score": 61,
    "tagline": "Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting.",
    "url": "https://top-agent-skills.com/skill/firebase-hosting"
  },
  "ranking": [
    {
      "rank": 1,
      "slug": "firebase-hosting",
      "name": "firebase-hosting-basics",
      "score": 61,
      "tagline": "Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting.",
      "bestFor": "Web apps already in the Google/Firebase ecosystem (Firestore, Auth) that want the agent to handle hosting setup and the deploy step without leaving chat.",
      "notIdealFor": "Static-only sites with no Firebase dependency — a generic static host (Pages, Netlify) is simpler and avoids the Firebase project requirement.",
      "provenance": "verified-org",
      "publisher": "Firebase (Google)",
      "license": "Apache-2.0",
      "compatibility": [
        "claude-code",
        "cursor",
        "codex",
        "gemini-cli",
        "antigravity"
      ],
      "install": "claude plugin marketplace add firebase/agent-skills",
      "url": "https://top-agent-skills.com/skill/firebase-hosting",
      "json": "https://top-agent-skills.com/skill/firebase-hosting.json"
    },
    {
      "rank": 2,
      "slug": "azure-resource-visualizer",
      "name": "azure-resource-visualizer",
      "score": 59,
      "tagline": "Diagrams generated from live infrastructure rather than from a prompt — it reads the actual resource group and draws what is really there.",
      "bestFor": "Documenting an Azure estate you inherited, where the useful diagram is the one that matches reality rather than the one in the original design doc.",
      "notIdealFor": "Any cloud that is not Azure, and any diagram of a system that does not exist yet — it reads deployed resources, so there is nothing to read before you deploy.",
      "provenance": "verified-org",
      "publisher": "Microsoft",
      "license": "MIT",
      "compatibility": [
        "claude-code"
      ],
      "install": "npx skills add microsoft/skills --skill azure-resource-visualizer",
      "url": "https://top-agent-skills.com/skill/azure-resource-visualizer",
      "json": "https://top-agent-skills.com/skill/azure-resource-visualizer.json"
    },
    {
      "rank": 3,
      "slug": "hostinger-agent-skills",
      "name": "hostinger-agent-skills",
      "score": 57,
      "tagline": "The registrar half of the stack: buy the domain, set the DNS, stand up the site — from one plugin.",
      "bestFor": "Registering a domain and pointing its DNS at a site without leaving the terminal, on an account you already own.",
      "notIdealFor": "Anyone not hosting at Hostinger — every endpoint is Hostinger-account-scoped, so it manages your portfolio there and nothing else.",
      "provenance": "verified-org",
      "publisher": "Hostinger",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "codex"
      ],
      "install": "npx skills add hostinger/hostinger-agent-skills --skill domains --yes",
      "url": "https://top-agent-skills.com/skill/hostinger-agent-skills",
      "json": "https://top-agent-skills.com/skill/hostinger-agent-skills.json"
    },
    {
      "rank": 4,
      "slug": "postgres-migrations",
      "name": "postgres-database-migration",
      "score": 55,
      "tagline": "Zero-downtime Postgres migrations, with the locking behaviour spelled out — which ALTER TABLE takes an AccessExclusiveLock and what to do instead.",
      "bestFor": "A schema change on a live table where the failure mode is a lock that takes production down, not a syntax error.",
      "notIdealFor": "Greenfield schemas with no data and no traffic — the whole value here is in the constraints that only exist once a table is live.",
      "provenance": "verified-org",
      "publisher": "TigerData (Timescale)",
      "license": "Apache-2.0",
      "compatibility": [
        "claude-code"
      ],
      "install": "npx skills add timescale/pg-aiguide --skill postgres-database-migration",
      "url": "https://top-agent-skills.com/skill/postgres-migrations",
      "json": "https://top-agent-skills.com/skill/postgres-migrations.json"
    },
    {
      "rank": 5,
      "slug": "deploy-checklist",
      "name": "deploy-checklist",
      "score": 51,
      "tagline": "The pre-ship checklist that catches the embarrassing stuff.",
      "bestFor": "Shipping a release with migrations, feature flags, or anything that needs a documented rollback path.",
      "notIdealFor": null,
      "provenance": "anthropic",
      "publisher": "Anthropic",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor",
        "codex",
        "antigravity"
      ],
      "install": "claude plugin install engineering",
      "url": "https://top-agent-skills.com/skill/deploy-checklist",
      "json": "https://top-agent-skills.com/skill/deploy-checklist.json"
    },
    {
      "rank": 6,
      "slug": "incident-response",
      "name": "incident-response",
      "score": 51,
      "tagline": "Incident triage + comms + blameless postmortem in one harness.",
      "bestFor": "Active production incidents and the postmortem afterward.",
      "notIdealFor": null,
      "provenance": "anthropic",
      "publisher": "Anthropic",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor",
        "codex",
        "antigravity"
      ],
      "install": "claude plugin install engineering",
      "url": "https://top-agent-skills.com/skill/incident-response",
      "json": "https://top-agent-skills.com/skill/incident-response.json"
    },
    {
      "rank": 7,
      "slug": "gitguardian-secret-scanning",
      "name": "scan-secrets",
      "score": 50,
      "tagline": "GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.",
      "bestFor": "Catching a credential before it reaches a remote, and knowing what to do about one already committed — the bundled doctrine covers rotation triggers and history rewriting, not just detection.",
      "notIdealFor": "Zero-setup use. It requires the ggshield CLI and an authenticated GitGuardian account, and the skill explicitly forbids substituting the GitGuardian MCP scan tool for the CLI.",
      "provenance": "verified-org",
      "publisher": "GitGuardian",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "codex"
      ],
      "install": "/plugin marketplace add GitGuardian/agent-skills",
      "url": "https://top-agent-skills.com/skill/gitguardian-secret-scanning",
      "json": "https://top-agent-skills.com/skill/gitguardian-secret-scanning.json"
    },
    {
      "rank": 8,
      "slug": "redis-cache-patterns",
      "name": "redis-cache-patterns",
      "score": 49,
      "tagline": "Caching without the bugs. Invalidation, write-through, cache-aside, distributed locks.",
      "bestFor": "Teams adding Redis caching where naming and invalidation are easy to get wrong.",
      "notIdealFor": null,
      "provenance": "verified-org",
      "publisher": "Redis",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor",
        "codex"
      ],
      "install": "npx skills add redis/agent-skills",
      "url": "https://top-agent-skills.com/skill/redis-cache-patterns",
      "json": "https://top-agent-skills.com/skill/redis-cache-patterns.json"
    },
    {
      "rank": 9,
      "slug": "sentry-error-handling",
      "name": "sentry-error-handling",
      "score": 48,
      "tagline": "Sentry the right way. Source maps, releases, breadcrumbs, performance, structured tags.",
      "bestFor": "Teams adding or improving error monitoring with Sentry.",
      "notIdealFor": null,
      "provenance": "verified-org",
      "publisher": "Sentry",
      "license": "Apache-2.0",
      "compatibility": [
        "claude-code",
        "cursor",
        "codex"
      ],
      "install": "/plugin marketplace add getsentry/skills",
      "url": "https://top-agent-skills.com/skill/sentry-error-handling",
      "json": "https://top-agent-skills.com/skill/sentry-error-handling.json"
    },
    {
      "rank": 10,
      "slug": "snyk-fix",
      "name": "snyk-fix",
      "score": 48,
      "tagline": "The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass.",
      "bestFor": "Closing the loop from finding to validated fix to pull request, rather than producing another list of vulnerabilities nobody has time to triage.",
      "notIdealFor": "Environments without Snyk. It requires the Snyk MCP server and an authenticated account, plus the GitHub CLI for PR creation — and it edits files, so review its diffs like any other agent-authored change.",
      "provenance": "verified-org",
      "publisher": "Snyk",
      "license": "Apache-2.0",
      "compatibility": [
        "claude-code"
      ],
      "install": "curl -fsSL 'https://raw.githubusercontent.com/snyk/studio-recipes/main/installer/dist/snyk-studio-install.sh' -o snyk-studio-install.sh",
      "url": "https://top-agent-skills.com/skill/snyk-fix",
      "json": "https://top-agent-skills.com/skill/snyk-fix.json"
    },
    {
      "rank": 11,
      "slug": "update-config",
      "name": "update-config",
      "score": 48,
      "tagline": "Edit settings.json safely. Hooks, perms, env, behaviors.",
      "bestFor": "Setting up hooks, managing permissions, and any \"from now on, when X\" automation.",
      "notIdealFor": null,
      "provenance": "anthropic",
      "publisher": "Anthropic",
      "license": "MIT",
      "compatibility": [
        "claude-code"
      ],
      "install": "Built into Claude Code. Invoke with /update-config.",
      "url": "https://top-agent-skills.com/skill/update-config",
      "json": "https://top-agent-skills.com/skill/update-config.json"
    },
    {
      "rank": 12,
      "slug": "loop",
      "name": "loop",
      "score": 48,
      "tagline": "Recurring task runner. Self-paced or interval-based.",
      "bestFor": "Polling for status, monitoring a deploy, repeating a check at intervals.",
      "notIdealFor": null,
      "provenance": "anthropic",
      "publisher": "Anthropic",
      "license": "MIT",
      "compatibility": [
        "claude-code"
      ],
      "install": "Built into Claude Code. Invoke with /loop.",
      "url": "https://top-agent-skills.com/skill/loop",
      "json": "https://top-agent-skills.com/skill/loop.json"
    },
    {
      "rank": 13,
      "slug": "schedule",
      "name": "schedule",
      "score": 48,
      "tagline": "Cron for remote Claude Code agents. Set it and forget it.",
      "bestFor": "Automated daily/weekly tasks — standup, status reports, monitoring, batch jobs.",
      "notIdealFor": null,
      "provenance": "anthropic",
      "publisher": "Anthropic",
      "license": "MIT",
      "compatibility": [
        "claude-code"
      ],
      "install": "Built into Claude Code. Invoke with /schedule.",
      "url": "https://top-agent-skills.com/skill/schedule",
      "json": "https://top-agent-skills.com/skill/schedule.json"
    },
    {
      "rank": 14,
      "slug": "expo-skills",
      "name": "expo-skills",
      "score": 47,
      "tagline": "Expo workflows: navigation, EAS, OTA, native modules.",
      "bestFor": "React Native + Expo teams.",
      "notIdealFor": null,
      "provenance": "verified-org",
      "publisher": "Expo",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor"
      ],
      "install": "npx skills add expo/skills",
      "url": "https://top-agent-skills.com/skill/expo-skills",
      "json": "https://top-agent-skills.com/skill/expo-skills.json"
    },
    {
      "rank": 15,
      "slug": "netlify-deploy",
      "name": "netlify-deploy",
      "score": 46,
      "tagline": "Netlify-authored deploy flow. Auth, site linking, Deploy Previews, production promotes.",
      "bestFor": "Teams shipping static sites and serverless functions to Netlify who want the agent to follow the platform's own deploy and preview conventions.",
      "notIdealFor": "Bare-metal or VM hosting — this is Netlify-platform-specific and assumes the Netlify CLI.",
      "provenance": "verified-org",
      "publisher": "Netlify",
      "license": "MIT",
      "compatibility": [
        "claude-code"
      ],
      "install": "npx skills add netlify/context-and-tools --skill netlify-deploy --yes",
      "url": "https://top-agent-skills.com/skill/netlify-deploy",
      "json": "https://top-agent-skills.com/skill/netlify-deploy.json"
    },
    {
      "rank": 16,
      "slug": "cloudflare-platform",
      "name": "cloudflare",
      "score": 46,
      "tagline": "Cloudflare-authored. Workers and Pages deploys, Wrangler config, KV/D1/R2 from chat.",
      "bestFor": "Edge-first teams deploying Workers and Pages who want the agent to use Wrangler correctly and follow Cloudflare's own platform patterns.",
      "notIdealFor": "Projects that never touch the Cloudflare edge — the Skill is Cloudflare-platform-specific.",
      "provenance": "verified-org",
      "publisher": "Cloudflare",
      "license": "Apache-2.0",
      "compatibility": [
        "claude-code"
      ],
      "install": "/plugin marketplace add cloudflare/skills",
      "url": "https://top-agent-skills.com/skill/cloudflare-platform",
      "json": "https://top-agent-skills.com/skill/cloudflare-platform.json"
    },
    {
      "rank": 17,
      "slug": "terraform-claude-skill",
      "name": "terraform-claude-skill",
      "score": 43,
      "tagline": "Terraform expertise on tap. State inspection, module validators, safety-first IaC.",
      "bestFor": "Terraform-heavy infra teams that want fewer foot-guns.",
      "notIdealFor": null,
      "provenance": "community",
      "publisher": "lgbarn",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor"
      ],
      "install": "npx skills add lgbarn/devops-skills --skill terraform",
      "url": "https://top-agent-skills.com/skill/terraform-claude-skill",
      "json": "https://top-agent-skills.com/skill/terraform-claude-skill.json"
    },
    {
      "rank": 18,
      "slug": "devops-engineer",
      "name": "devops-engineer",
      "score": 43,
      "tagline": "Senior DevOps engineer persona — CI/CD, containers, blue-green/canary, IaC across clouds.",
      "bestFor": "Generalist DevOps work where you want a higher-quality default than the agent gives unprompted.",
      "notIdealFor": null,
      "provenance": "community",
      "publisher": "jeffallan",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor"
      ],
      "install": "npx skills add jeffallan/claude-skills --skill devops-engineer",
      "url": "https://top-agent-skills.com/skill/devops-engineer",
      "json": "https://top-agent-skills.com/skill/devops-engineer.json"
    },
    {
      "rank": 19,
      "slug": "ios-simulator-skill",
      "name": "ios-simulator-skill",
      "score": 41,
      "tagline": "Drive the iOS Simulator from the agent loop. Build and test iOS apps.",
      "bestFor": "iOS dev where the agent should compile, run, and test in the simulator.",
      "notIdealFor": null,
      "provenance": "community",
      "publisher": "conorluddy",
      "license": "MIT",
      "compatibility": [
        "claude-code"
      ],
      "install": "npx skills add conorluddy/ios-simulator-skill",
      "url": "https://top-agent-skills.com/skill/ios-simulator-skill",
      "json": "https://top-agent-skills.com/skill/ios-simulator-skill.json"
    },
    {
      "rank": 20,
      "slug": "k8s-security-policies",
      "name": "k8s-security-policies",
      "score": 40,
      "tagline": "Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh.",
      "bestFor": "Hardening k8s clusters before they ship.",
      "notIdealFor": null,
      "provenance": "community",
      "publisher": "jeffallan",
      "license": "MIT",
      "compatibility": [
        "claude-code",
        "cursor"
      ],
      "install": "npx skills add jeffallan/claude-skills --skill k8s-security-policies",
      "url": "https://top-agent-skills.com/skill/k8s-security-policies",
      "json": "https://top-agent-skills.com/skill/k8s-security-policies.json"
    }
  ],
  "faqs": [
    {
      "question": "Do these Skills replace Terraform Cloud or Pulumi?",
      "answer": "No — they help you author and review IaC, not host the state. They pair with whatever backend you already use (S3+DynamoDB, Terraform Cloud, Pulumi Cloud)."
    },
    {
      "question": "Which Skills work for Kubernetes?",
      "answer": "Several Skills cover k8s manifests, Helm charts, kustomize overlays, and cluster hardening. The top-ranked k8s Skills include security audits as part of the generation step."
    },
    {
      "question": "Can these Skills run kubectl or terraform apply directly?",
      "answer": "They generate and review configs. Whether the agent executes them depends on the agent — Claude Code runs Bash, so yes, with your approval; Claude.ai web does not."
    },
    {
      "question": "How do I avoid hard-coded secrets in DevOps Skills?",
      "answer": "The top Skills enforce reading secrets from environment, GitHub Actions secrets, or a vault MCP server — never inline. Lower-ranked Skills often violate this; check the Skill's docs before adoption."
    },
    {
      "question": "Are CI/CD Skills cross-platform?",
      "answer": "Most target GitHub Actions; several also support GitLab CI and CircleCI. Filter by tag on the listing page to see verified platforms."
    }
  ],
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "attribution": "Top Agent Skills (https://top-agent-skills.com)"
}