--- title: Top DevOps & Infrastructure Skills slug: devops-infra type: primary-category canonical: https://top-agent-skills.com/top-skills-for-devops-infra skills: 20 rubric: 1.0 updated: 2026-08-19 --- # Top DevOps & Infrastructure Skills **firebase-hosting-basics** is the top-ranked devops Skill at 61/100: Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting. Terraform, AWS/GCP/Azure, CI/CD pipelines, container management, IaC patterns. 20 Skills indexed, ranked by a published composite score (https://top-agent-skills.com/about/methodology). Content last changed 2026-08-19. ## The ranking ### 1. firebase-hosting-basics — score 61/100 (verified-org) Firebase-authored. Init, configure, and one-step deploy to Firebase Hosting / App Hosting. - Best for: Web apps already in the Google/Firebase ecosystem (Firestore, Auth) that want the agent to handle hosting setup and the deploy step without leaving chat. - Not ideal for: Static-only sites with no Firebase dependency — a generic static host (Pages, Netlify) is simpler and avoids the Firebase project requirement. - Publisher: Firebase (Google) · Apache-2.0 - Verified on: claude-code, cursor, codex, gemini-cli, antigravity ```bash claude plugin marketplace add firebase/agent-skills ``` Full entry: https://top-agent-skills.com/skill/firebase-hosting (https://top-agent-skills.com/skill/firebase-hosting.md) ### 2. azure-resource-visualizer — score 59/100 (verified-org) Diagrams generated from live infrastructure rather than from a prompt — it reads the actual resource group and draws what is really there. - Best for: Documenting an Azure estate you inherited, where the useful diagram is the one that matches reality rather than the one in the original design doc. - Not ideal for: Any cloud that is not Azure, and any diagram of a system that does not exist yet — it reads deployed resources, so there is nothing to read before you deploy. - Publisher: Microsoft · MIT - Verified on: claude-code ```bash npx skills add microsoft/skills --skill azure-resource-visualizer ``` Full entry: https://top-agent-skills.com/skill/azure-resource-visualizer (https://top-agent-skills.com/skill/azure-resource-visualizer.md) ### 3. hostinger-agent-skills — score 57/100 (verified-org) The registrar half of the stack: buy the domain, set the DNS, stand up the site — from one plugin. - Best for: Registering a domain and pointing its DNS at a site without leaving the terminal, on an account you already own. - Not ideal for: Anyone not hosting at Hostinger — every endpoint is Hostinger-account-scoped, so it manages your portfolio there and nothing else. - Publisher: Hostinger · MIT - Verified on: claude-code, codex ```bash npx skills add hostinger/hostinger-agent-skills --skill domains --yes ``` Full entry: https://top-agent-skills.com/skill/hostinger-agent-skills (https://top-agent-skills.com/skill/hostinger-agent-skills.md) ### 4. postgres-database-migration — score 55/100 (verified-org) Zero-downtime Postgres migrations, with the locking behaviour spelled out — which ALTER TABLE takes an AccessExclusiveLock and what to do instead. - Best for: A schema change on a live table where the failure mode is a lock that takes production down, not a syntax error. - Not ideal for: Greenfield schemas with no data and no traffic — the whole value here is in the constraints that only exist once a table is live. - Publisher: TigerData (Timescale) · Apache-2.0 - Verified on: claude-code ```bash npx skills add timescale/pg-aiguide --skill postgres-database-migration ``` Full entry: https://top-agent-skills.com/skill/postgres-migrations (https://top-agent-skills.com/skill/postgres-migrations.md) ### 5. deploy-checklist — score 51/100 (official-anthropic) The pre-ship checklist that catches the embarrassing stuff. - Best for: Shipping a release with migrations, feature flags, or anything that needs a documented rollback path. - Publisher: Anthropic · MIT - Verified on: claude-code, cursor, codex, antigravity ```bash claude plugin install engineering ``` Full entry: https://top-agent-skills.com/skill/deploy-checklist (https://top-agent-skills.com/skill/deploy-checklist.md) ### 6. incident-response — score 51/100 (official-anthropic) Incident triage + comms + blameless postmortem in one harness. Full entry: https://top-agent-skills.com/skill/incident-response (https://top-agent-skills.com/skill/incident-response.md) ### 7. scan-secrets — score 50/100 (verified-org) GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits. Full entry: https://top-agent-skills.com/skill/gitguardian-secret-scanning (https://top-agent-skills.com/skill/gitguardian-secret-scanning.md) ### 8. redis-cache-patterns — score 49/100 (verified-org) Caching without the bugs. Invalidation, write-through, cache-aside, distributed locks. Full entry: https://top-agent-skills.com/skill/redis-cache-patterns (https://top-agent-skills.com/skill/redis-cache-patterns.md) ### 9. sentry-error-handling — score 48/100 (verified-org) Sentry the right way. Source maps, releases, breadcrumbs, performance, structured tags. Full entry: https://top-agent-skills.com/skill/sentry-error-handling (https://top-agent-skills.com/skill/sentry-error-handling.md) ### 10. snyk-fix — score 48/100 (verified-org) The remediation half of security work: scan, fix, validate the fix, open the PR. Batch mode handles a whole backlog of CVEs in one pass. Full entry: https://top-agent-skills.com/skill/snyk-fix (https://top-agent-skills.com/skill/snyk-fix.md) ### 11. update-config — score 48/100 (official-anthropic) Edit settings.json safely. Hooks, perms, env, behaviors. Full entry: https://top-agent-skills.com/skill/update-config (https://top-agent-skills.com/skill/update-config.md) ### 12. loop — score 48/100 (official-anthropic) Recurring task runner. Self-paced or interval-based. Full entry: https://top-agent-skills.com/skill/loop (https://top-agent-skills.com/skill/loop.md) ### 13. schedule — score 48/100 (official-anthropic) Cron for remote Claude Code agents. Set it and forget it. Full entry: https://top-agent-skills.com/skill/schedule (https://top-agent-skills.com/skill/schedule.md) ### 14. expo-skills — score 47/100 (verified-org) Expo workflows: navigation, EAS, OTA, native modules. Full entry: https://top-agent-skills.com/skill/expo-skills (https://top-agent-skills.com/skill/expo-skills.md) ### 15. netlify-deploy — score 46/100 (verified-org) Netlify-authored deploy flow. Auth, site linking, Deploy Previews, production promotes. Full entry: https://top-agent-skills.com/skill/netlify-deploy (https://top-agent-skills.com/skill/netlify-deploy.md) ### 16. cloudflare — score 46/100 (verified-org) Cloudflare-authored. Workers and Pages deploys, Wrangler config, KV/D1/R2 from chat. Full entry: https://top-agent-skills.com/skill/cloudflare-platform (https://top-agent-skills.com/skill/cloudflare-platform.md) ### 17. terraform-claude-skill — score 43/100 (community) Terraform expertise on tap. State inspection, module validators, safety-first IaC. Full entry: https://top-agent-skills.com/skill/terraform-claude-skill (https://top-agent-skills.com/skill/terraform-claude-skill.md) ### 18. devops-engineer — score 43/100 (community) Senior DevOps engineer persona — CI/CD, containers, blue-green/canary, IaC across clouds. Full entry: https://top-agent-skills.com/skill/devops-engineer (https://top-agent-skills.com/skill/devops-engineer.md) ### 19. ios-simulator-skill — score 41/100 (community) Drive the iOS Simulator from the agent loop. Build and test iOS apps. Full entry: https://top-agent-skills.com/skill/ios-simulator-skill (https://top-agent-skills.com/skill/ios-simulator-skill.md) ### 20. k8s-security-policies — score 40/100 (community) Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh. Full entry: https://top-agent-skills.com/skill/k8s-security-policies (https://top-agent-skills.com/skill/k8s-security-policies.md) ## About this category The best agent skills for DevOps and infrastructure in 2026 are the cloud-vendor-authored Skills — HashiCorp for Terraform module authoring, the GitHub Actions Skills for CI/CD pipeline design, and the Vercel/Netlify/Cloudflare platform Skills for deploy automation — each encoding the canonical pattern for its ecosystem. DevOps & infrastructure Skills handle the long tail of cloud, container, and CI/CD work that engineering teams used to outsource to platform specialists. Terraform module authoring, Kubernetes manifest generation, GitHub Actions workflow design, Docker hardening, AWS / GCP / Azure resource provisioning, secrets-management patterns, blue-green deploys, rollback playbooks — each is a Skill that loads when the work calls for it and stays out of the way otherwise. These Skills get used the moment a small team can no longer pretend infrastructure is someone else's problem. Common workflows include writing a Terraform module for a new VPC, debugging a failing GitHub Actions pipeline, generating Kubernetes resources for a new service, designing a multi-stage Docker build, automating deploy and rollback flows, and authoring runbooks for on-call. Several pair with cloud MCP servers (Vercel, Netlify, AWS, GCP) for live state. Platform engineers, SREs, and full-stack developers wearing the DevOps hat use these Skills heavily. Composite scoring weights provenance (HashiCorp, cloud vendors, recognized SRE orgs), real-world install count, and how cleanly the Skill handles the messy parts: state management, secrets, region-specific quirks, and rollback paths. ## Common questions **Do these Skills replace Terraform Cloud or Pulumi?** No — they help you author and review IaC, not host the state. They pair with whatever backend you already use (S3+DynamoDB, Terraform Cloud, Pulumi Cloud). **Which Skills work for Kubernetes?** Several Skills cover k8s manifests, Helm charts, kustomize overlays, and cluster hardening. The top-ranked k8s Skills include security audits as part of the generation step. **Can these Skills run kubectl or terraform apply directly?** They generate and review configs. Whether the agent executes them depends on the agent — Claude Code runs Bash, so yes, with your approval; Claude.ai web does not. **How do I avoid hard-coded secrets in DevOps Skills?** The top Skills enforce reading secrets from environment, GitHub Actions secrets, or a vault MCP server — never inline. Lower-ranked Skills often violate this; check the Skill's docs before adoption. **Are CI/CD Skills cross-platform?** Most target GitHub Actions; several also support GitLab CI and CircleCI. Filter by tag on the listing page to see verified platforms. --- _Top Agent Skills. Machine-readable twin of https://top-agent-skills.com/top-skills-for-devops-infra._ _JSON: https://top-agent-skills.com/top-skills-for-devops-infra.json · whole catalog: https://top-agent-skills.com/skills.json (CC BY 4.0)_