Operations
Plugin
cc-devops-skills
A practical skill pack for DevOps work in Claude Code and Codex desktop. This repository ships 31 skills: 16 generators for scaffolding production-ready configs 14 validators for linting, security checks, and dry-run validation 1 debugger (k8s-debug) for
Plugin Signal82/100Strong
maintained92
capable72
documented100
adopted52
Install on Claude Code
> /plugin marketplace add akin-ozer/cc-devops-skills> /plugin install devops-skills@akin-ozer
Stats
294
Stars
32
Forks
Active
Maintenance
Python
Language
Apache-2.0
License
22d ago
Last commit
8mo ago
Created
Repo: akin-ozer/cc-devops-skills
In this plugin
- ansible-generator
- ansible-validator
- azure-pipelines-generator
- azure-pipelines-validator
- bash-script-generator
- bash-script-validator
- dockerfile-generator
- dockerfile-validator
- fluentbit-generator
- fluentbit-validator
- github-actions-generator
- github-actions-validator
- gitlab-ci-generator
- gitlab-ci-validator
- helm-generator
- helm-validator
- jenkinsfile-generator
- jenkinsfile-validator
- k8s-debug
- k8s-yaml-generator
- k8s-yaml-validator
- logql-generator
- loki-config-generator
- makefile-generator
- makefile-validator
- promql-generator
- promql-validator
- terraform-generator
- terraform-validator
- terragrunt-generator
- terragrunt-validator
What's inside
Skill(31 skills)
/ansible-generatorGenerate, create, or scaffold Ansible playbooks, roles, tasks, handlers, inventory, vars./ansible-validatorValidate, lint, audit, or debug Ansible playbooks, roles, inventories, FQCN, tasks./azure-pipelines-generatorGenerate/create/scaffold azure-pipelines.yml, stages, jobs, steps, or reusable templates./azure-pipelines-validatorValidate, lint, audit, or review azure-pipelines.yml — syntax, security, best practices./bash-script-generatorCreate, generate, write, or scaffold bash/shell scripts (.sh), automation, or CLI tools./bash-script-validatorValidate, lint, audit, or fix bash/shell/.sh scripts via ShellCheck.
- /dockerfile-generator
- /dockerfile-validator
- /fluentbit-generator
- /fluentbit-validator
- /github-actions-generator
- /github-actions-validator
- /gitlab-ci-generator
- /gitlab-ci-validator
- /helm-generator
- /helm-validator
- /jenkinsfile-generator
- /jenkinsfile-validator
- /k8s-debug
- /k8s-yaml-generator
- /k8s-yaml-validator
- /logql-generator
- /loki-config-generator
- /makefile-generator
- /makefile-validator
- /promql-generator
- /promql-validator
- /terraform-generator
- /terraform-validator
- /terragrunt-generator
- /terragrunt-validator
Badges
README
DevOps skills for Claude Code and Codex
A practical skill pack for DevOps work in Claude Code and Codex desktop.
This repository ships 31 skills:
- 16 generators for scaffolding production-ready configs
- 14 validators for linting, security checks, and dry-run validation
- 1 debugger (
k8s-debug) for cluster troubleshooting
The goal is simple: make infra and pipeline work faster without skipping correctness checks.
Quick Install
Claude Code Plugin Marketplace
/plugin marketplace add akin-ozer/cc-devops-skills
/plugin install devops-skills@akin-ozer
Codex Desktop
Skills only:
$skill-installer install https://github.com/akin-ozer/cc-devops-skills/tree/main/devops-skills-plugin/skills
Manual plugin install:
- Clone the repo and link the packaged plugin into your local Codex plugin directory:
git clone https://github.com/akin-ozer/cc-devops-skills.git ~/.codex/devops-skills
mkdir -p ~/plugins ~/.agents/plugins
ln -s ~/.codex/devops-skills/devops-skills-plugin ~/plugins/devops-skills
- Create or update
~/.agents/plugins/marketplace.jsonso Codex can discover the plugin:
{
"name": "local-plugins",
"interface": {
"displayName": "Local Plugins"
},
"plugins": [
{
"name": "devops-skills",
"source": {
"source": "local",
"path": "./plugins/devops-skills"
},
"policy": {
"installation": "AVAILABLE",
"authentication": "ON_INSTALL"
},
"category": "Productivity"
}
]
}
If you already use ~/.agents/plugins/marketplace.json, append the devops-skills entry instead of replacing the file.
The packaged Codex manifest lives at devops-skills-plugin/.codex-plugin/plugin.json. It exists alongside the Claude manifest and points at the same skills/ directory.
Team Rollout
Add this to project-level .claude/settings.json:
{
"extraKnownMarketplaces": {
"devops-skills": {
"source": {
"source": "github",
"repo": "akin-ozer/cc-devops-skills"
}
}
}
}
Drop-In GitHub Action Wrapper
This repository also publishes a drop-in wrapper around anthropics/claude-code-action@v1.
Replace:
uses: anthropics/claude-code-action@v1
With:
uses: akin-ozer/cc-devops-skills@v1
Behavior stays compatible with upstream v1, and DevOps skills are injected by default through:
- Marketplace:
https://github.com/akin-ozer/cc-devops-skills.git - Plugin:
devops-skills@akin-ozer
Tag policy:
akin-ozer/cc-devops-skills@v1tracks this wrapper's latestv1.x.yrelease.- The wrapper internally calls
anthropics/claude-code-action@v1(tag), not a pinned SHA.
To run as pure passthrough (no auto-injection):
uses: akin-ozer/cc-devops-skills@v1
with:
inject_devops_skills: "false"
Docs and examples:
- Wrapper details:
docs/drop-in-wrapper.md - IaC PR review workflow:
examples/github-actions/iac-pr-review.yml - Compatibility drift check:
scripts/check_upstream_action_surface.sh
How people use this repo
Most workflows are generator + validator loops.
flowchart LR
A["Ask for generator skill"] --> B["Create artifact"]
B --> C["Run matching validator"]
C --> D{"Passes checks?"}
D -- "No" --> E["Patch + re-run checks"]
D -- "Yes" --> F["Ship to PR/CI"]
Typical prompts:
Use terraform-generator to scaffold a reusable AWS VPC module with outputs and examples.
Validate ./infra/vpc with terraform-validator and list only high-severity findings.
Use k8s-debug to diagnose pods stuck in Pending in namespace payments.
What makes these skills useful
- Local-first validation pipelines: many validator skills run shell/Python checks directly from their
scripts/folders. - Tool-aware workflows: validators integrate with real tools like
terraform,tflint,checkov,helm,kubeconform,actionlint, andact. - CRD/provider documentation lookup: Kubernetes/Helm/Terraform/Terragrunt/Ansible flows include explicit doc lookup paths for custom resources.
- Fallback behavior is defined: when a tool is missing, many skills degrade gracefully and tell you exactly what was skipped.
Skill catalog (31)
Infrastructure as code (6)
| Skill | Primary use |
|---|---|
ansible-generator | Scaffold playbooks, roles, inventories, and vars |
ansible-validator | Validate/lint/security-check playbooks, roles, and inventories |
terraform-generator | Generate Terraform modules/resources/variables/outputs |
terraform-validator | Run Terraform validation, linting, security audit, and planning |
terragrunt-generator | Scaffold Terragrunt root/child/stack layouts |
terragrunt-validator | Validate Terragrunt HCL, stacks, and module wiring |
CI/CD pipelines (8)
| Skill | Primary use |
|---|---|
azure-pipelines-generator | Generate azure-pipelines.yml and reusable templates |
azure-pipelines-validator | Validate syntax/security/best-practice rules for Azure Pipelines |
github-actions-generator | Scaffold workflows and action.yml actions |
github-actions-validator | Validate and test workflows under .github/workflows |
gitlab-ci-generator | Generate .gitlab-ci.yml pipelines and job stages |
gitlab-ci-validator | Validate and secure GitLab CI configs |
jenkinsfile-generator | Generate declarative/scripted Jenkinsfiles |
jenkinsfile-validator | Validate Jenkinsfiles and shared-library pipeline code |
Containers and Kubernetes (7)
| Skill | Primary use |
|---|---|
dockerfile-generator | Create production-friendly Dockerfiles |
dockerfile-validator | Lint and security-check Dockerfiles |
helm-generator | Scaffold Helm charts, values, and templates |
helm-validator | Validate chart structure, templates, schemas, and CRD usage |
k8s-yaml-generator | Generate Kubernetes manifests (including CRDs) |
k8s-yaml-validator | Validate/lint/dry-run Kubernetes YAML |
k8s-debug | Troubleshoot runtime cluster failures |
Observability and Logging (6)
| Skill | Primary use |
|---|---|
fluentbit-generator | Generate Fluent Bit pipelines (INPUT/FILTER/OUTPUT) |
fluentbit-validator | Validate Fluent Bit config quality and safety |
logql-generator | Build LogQL queries and alert expressions |
loki-config-generator | Generate Loki server configs for common deployment modes |
promql-generator | Generate PromQL queries, recording rules, and alerts |
promql-validator | Validate and optimize PromQL queries/alerts |
Scripting and Build (4)
| Skill | Primary use |
|---|---|
bash-script-generator | Create shell scripts and CLI helpers |
bash-script-validator | Validate shell scripts with ShellCheck-oriented checks |
makefile-generator | Generate Makefiles with reusable targets |
makefile-validator | Validate Makefile correctness and anti-patterns |
Validator Internals (examples)
These are real execution patterns inside the skill instructions and scripts:
| Skill | Validation pattern |
|---|---|
terraform-validator | terraform fmt -> tflint -> terraform validate -> Checkov -> optional terraform plan |
k8s-yaml-validator | CRD detection -> kubeconform schema checks -> kubectl --dry-run flow |
helm-validator | helm lint -> helm template -> kubeconform -> optional cluster dry-run |
github-actions-validator | actionlint static checks + act runtime workflow tests |
gitlab-ci-validator | syntax + best-practice + security checks with strict/test-only modes |
ansible-validator | syntax/lint/check-mode + role tests + security checks |
dockerfile-validator | scripted lint/security path with fallback scanning modes |
Requirements
You do not need every tool for every skill. Install the tools for the domains you use.
Baseline
bashpython3(3.8+ recommended; 3.9+ for some security tooling)
Common Toolchain by Domain
| Domain | Common tools |
|---|---|
| Terraform/Terragrunt | terraform, tflint, terragrunt, checkov |
| Kubernetes/Helm | kubectl, kubeconform, helm, yamllint |
| Docker | hadolint |
| GitHub Actions | actionlint, act |
| Shell scripting | shellcheck |
| Prometheus | promtool |
Quick Install (macOS example)
brew install terraform tflint terragrunt helm kubeconform kubectl hadolint
brew install actionlint act shellcheck prometheus yq fluent-bit
pipx install ansible ansible-lint checkov yamllint molecule
helm plugin install https://github.com/databus23/helm-diff
Repo Layout
cc-devops-skills/
├── action.yml
├── README.md
├── LICENSE
├── docs/
│ └── drop-in-wrapper.md
├── examples/
│ └── github-actions/
│ └── iac-pr-review.yml
├── scripts/
│ └── check_upstream_action_surface.sh
├── .github/workflows/
│ └── compat-check.yml
└── devops-skills-plugin/
├── .claude-plugin/plugin.json
├── .codex-plugin/plugin.json
└── skills/
└── <skill-name>/
├── SKILL.md
├── scripts/
├── references/
├── assets/
├── examples/
└── tests/ (or test/)
Contributing
See CONTRIBUTING.md for the skill folder contract, required SKILL.md frontmatter, and generator/validator pairing conventions.
Contributions are welcome for:
- new skills in adjacent DevOps domains
- better validator coverage and safer defaults
- test fixtures and regression tests
- improved docs/examples for real production scenarios
License
Apache-2.0
File tree
akin-ozer/cc-devops-skillsView on GitHub
.claude-plugin/
marketplace.json
.github/
workflows/
compat-check.yml
.gitignore
action.yml
CONTRIBUTING.md
devops-skills-plugin/
.claude-plugin/
plugin.json
.codex-plugin/
plugin.json
skills/
ansible-generator/
.gitignore
assets/
templates/
inventory/
group_vars/
all.yml
databases.yml
webservers.yml
host_vars/
web1.example.com.yml
hosts
hosts.yml
playbook/
basic_playbook.yml
project/
.ansible-lint
ansible.cfg
requirements.yml
role/
defaults/
main.yml
files/
.gitkeep
handlers/
main.yml
meta/
argument_specs.yml
main.yml
molecule/
default/
converge.yml
molecule.yml
README.md
tasks/
main.yml
templates/
config.j2
vars/
Debian.yml
main.yml
RedHat.yml
references/
best-practices.md
module-patterns.md
SKILL.md
test/
playbooks/
nginx-tls-playbook.yml
templates/
nginx-tls.conf.j2
roles/
sample-role/
defaults/
main.yml
handlers/
main.yml
meta/
main.yml
tasks/
main.yml
templates/
config.j2
vars/
Debian.yml
default.yml
RedHat.yml
test_fixture_regressions.py
ansible-validator/
.gitignore
assets/
.ansible-lint
.yamllint
molecule.yml.template
references/
best_practices.md
common_errors.md
module_alternatives.md
security_checklist.md
scripts/
check_fqcn.sh
extract_ansible_info_wrapper.sh
extract_ansible_info.py
scan_secrets.sh
setup_tools.sh
test_role.sh
validate_inventory.sh
validate_playbook_security.sh
validate_playbook.sh
validate_role_security.sh
validate_role.sh
SKILL.md
test/
inventory/
localhost-nested.yml
playbooks/
bad-playbook.yml
good-playbook.yml
regression-inline-fqcn.yml
regression-mixed-import.yml
README.md
roles/
geerlingguy.mysql/
.ansible-lint
.github/
FUNDING.yml
workflows/
ci.yml
release.yml
stale.yml
.gitignore
.yamllint
defaults/
main.yml
handlers/
main.yml
LICENSE
meta/
main.yml
molecule/
default/
converge.yml
molecule.yml
README.md
tasks/
configure.yml
databases.yml
main.yml
replication.yml
secure-installation.yml
setup-Archlinux.yml
setup-Debian.yml
setup-RedHat.yml
users.yml
variables.yml
templates/
my.cnf.j2
root-my.cnf.j2
user-my.cnf.j2
vars/
Archlinux.yml
Debian-10.yml
Debian-11.yml
Debian-12.yml
Debian-13.yml
Debian.yml
RedHat-10.yml
RedHat-7.yml
RedHat-8.yml
RedHat-9.yml
Ubuntu.yml
test_regressions.sh
azure-pipelines-generator/
docs/
best-practices.md
tasks-reference.md
templates-guide.md
yaml-schema.md
examples/
basic-ci.yml
dotnet-cicd.yml
go-cicd.yml
kubernetes-deploy.yml
multi-stage-cicd.yml
python-cicd.yml
template-usage.yml
templates/
build-template.yml
deploy-template.yml
SKILL.md
tests/
test_template_regressions.py
azure-pipelines-validator/
.gitignore
assets/
.yamllint
docs/
azure-pipelines-reference.md
examples/
basic-pipeline.yml
deployment-pipeline.yml
docker-build.yml
multi-platform.yml
regression-conditional-danger.yml
regression-runonce-on-failure.yml
template-conditional-stages.yml
template-conditional-steps.yml
template-example.yml
test-with-issues.yml
scripts/
check_best_practices.py
check_security.py
python_wrapper.sh
step_walker.py
test_regressions.py
validate_azure_pipelines.sh
validate_syntax.py
yamllint_check.sh
SKILL.md
bash-script-generator/
assets/
templates/
standard-template.sh
docs/
bash-scripting-guide.md
generation-best-practices.md
script-patterns.md
text-processing-guide.md
examples/
log-analyzer.sh
scripts/
generate_script_template.sh
run_ci_checks.sh
test_generator.sh
SKILL.md
bash-script-validator/
docs/
awk-reference.md
bash-reference.md
common-mistakes.md
grep-reference.md
regex-reference.md
sed-reference.md
shell-reference.md
shellcheck-reference.md
examples/
bad-bash.sh
bad-shell.sh
good-bash.sh
good-shell.sh
scripts/
run_ci_checks.sh
shellcheck_wrapper.sh
test_validate.sh
validate.sh
SKILL.md
dockerfile-generator/
examples/
example.dockerignore
golang-distroless.Dockerfile
java-springboot.Dockerfile
nextjs-production.Dockerfile
nodejs-multistage.Dockerfile
python-fastapi.Dockerfile
references/
language_specific_guides.md
multistage_builds.md
optimization_patterns.md
security_best_practices.md
scripts/
generate_dockerignore.sh
generate_golang.sh
generate_java.sh
generate_nodejs.sh
generate_python.sh
test_generator.sh
SKILL.md
dockerfile-validator/
.gitignore
examples/
.dockerignore.example
bad-example.Dockerfile
golang-distroless.Dockerfile
good-example.Dockerfile
python-optimized.Dockerfile
security-issues.Dockerfile
references/
docker_best_practices.md
optimization_guide.md
security_checklist.md
scripts/
dockerfile-validate.sh
test_validate.sh
SKILL.md
tests/
fixtures/
copy-before-yarn-lock-read.Dockerfile
copy-before-yarn.Dockerfile
from-platform-nonroot.Dockerfile
test_regression.sh
fluentbit-generator/
examples/
application-multiline.conf
cloudwatch.conf
file-tail-s3.conf
full-production.conf
http-input-kafka.conf
kubernetes-elasticsearch.conf
kubernetes-loki.conf
kubernetes-opentelemetry.conf
lua-filtering.conf
multi-destination.conf
parsers.conf
prometheus-metrics.conf
stream-processor.conf
syslog-forward.conf
output/
k8s-errors-elasticsearch.conf
parsers.conf
scripts/
generate_config.py
test_generate_config.py
SKILL.md
fluentbit-validator/
.gitignore
scripts/
validate_config.py
validate.sh
SKILL.md
tests/
invalid-missing-required.conf
invalid-opentelemetry.conf
invalid-security-issues.conf
invalid-tag-mismatch.conf
test_validate_config.py
valid-basic.conf
valid-multioutput.conf
valid-opentelemetry.conf
github-actions-generator/
assets/
templates/
action/
composite/
action.yml
docker/
action.yml
Dockerfile
entrypoint.sh
javascript/
action.yml
index.js
package.json
workflow/
basic_workflow.yml
reusable_workflow.yml
examples/
actions/
setup-node-cached/
action.yml
caching/
docker-buildkit.yml
README.md
security/
dependency-review.yml
sbom-attestation.yml
triggers/
chatops-commands.yml
repository-dispatch.yml
workflow-orchestration.yml
workflows/
docker-build-push.yml
go-ci.yml
monorepo-ci.yml
multi-environment-deploy.yml
nodejs-ci.yml
python-ci.yml
scheduled-tasks.yml
references/
advanced-triggers.md
best-practices.md
common-actions.md
custom-actions.md
expressions-and-contexts.md
modern-features.md
scripts/
test_generator.sh
SKILL.md
github-actions-validator/
.gitignore
examples/
outdated-versions.yml
README.md
valid-ci.yml
with-errors.yml
references/
act_usage.md
action_versions.md
actionlint_usage.md
common_errors.md
modern_features.md
runners.md
scripts/
install_tools.sh
validate_workflow.sh
SKILL.md
tests/
... 445 moreFAQ
cc-devops-skills is a Claude Code plugin with 31 hand-picked skills for operations work, indexed on Flowy. Install it with the command on its page. It includes ansible-generator, ansible-validator, azure-pipelines-generator. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
- What is cc-devops-skills?
- A practical skill pack for DevOps work in Claude Code and Codex desktop. This repository ships 31 skills: 16 generators for scaffolding production-ready configs 14 validators for linting, security checks, and dry-run validation 1 debugger (k8s-debug) for
- How do I install cc-devops-skills?
- Run these in Claude Code: /plugin marketplace add akin-ozer/cc-devops-skills then /plugin install devops-skills@akin-ozer. Then prompt normally.
- Does cc-devops-skills auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.
- Is cc-devops-skills free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.