All authors
Claude Skills by talkops-ai
github.com/talkops-ai38 skills0 installs96 views
- Cloud CoreBaseline multi-cloud primitives across AWS, Azure, and GCP: IAM least-privilege policies, VPC/VNet networking, secure compute, and CLI execution guardrails. Use when designing, reviewing, or implementing multi-cloud infrastructure primitives for: (1) IAM least-privilege policies and role design across AWS/Azure/GCP, (2) VPC, VNet, and Cloud VPC network topologies, (3) Secure compute instances and security groups/firewalls, or (4) CLI execution guardrails and dry-run safety.Votes: 0GitHub stars: 2
- DockerWrite optimised Dockerfiles with multi-stage builds, security hardening, and Compose orchestration. Use when authoring, reviewing, or optimizing container artifacts for: (1) Multi-stage Dockerfiles for Go, Node.js, Python, or Rust, (2) Container security hardening including non-root USER, minimal base images, and secret mounts, (3) Docker Compose orchestration definitions, healthchecks, and networking, or (4) Docker build performance and layer caching optimization.Votes: 0GitHub stars: 2
- KubernetesCreate, audit, and manage Kubernetes manifests, Kustomize overlays, and cluster resources. Use when authoring, reviewing, or managing Kubernetes artifacts for: (1) Production-grade Deployment, Service, Ingress, and NetworkPolicy manifests, (2) Kustomize base and overlay configurations across environments (dev/staging/prod), (3) Pod Security Standards and manifest security auditing, or (4) Kubectl pre-flight dry-run and diff workflows.Votes: 0GitHub stars: 2
- RememberReview the current conversation and capture valuable knowledge — best practices, coding conventions, architecture decisions, workflows, and user feedback — into persistent memory (AGENTS.md) or reusable skills. Use when the user says: (1) remember this, (2) save what we learned, (3) update memory, (4) capture learnings.Votes: 0GitHub stars: 2
- Opentofu Data SecurityData protection enforcement patterns for OpenTofu AWS modules covering KMS encryption at rest, S3 ACL deprecation with BucketOwnerEnforced ownership, public access blocking at account and resource level, and encryption defaults for storage, messaging, and database services. Use when: (1) enforcing KMS CMK encryption across S3, RDS, EBS, DynamoDB, SQS, and Secrets Manager, (2) disabling deprecated S3 ACLs via aws_s3_bucket_ownership_controls, (3) implementing aws_s3_bucket_public_access_block ...Votes: 0GitHub stars: 2
- Opentofu Iam SecurityComprehensive IAM security patterns for OpenTofu AWS modules covering service roles, instance profiles, policy document authoring, exclusive policy management, permissions boundaries, and resource-based policies (S3, KMS, SNS). Use when: (1) creating EC2 service roles with the IAM role/instance profile/instance trinity, (2) authoring IAM policies using aws_iam_policy_document data sources, (3) handling AWS runtime variable interpolation with &{...} syntax, (4) preventing ClickOps drift via aw...Votes: 0GitHub stars: 2
- Opentofu Mcp Schema LookupWorkflow for querying the OpenTofu MCP server to inspect AWS provider resource schemas, data source schemas, module inputs/outputs, and provider initialization requirements before writing or editing HCL code. Use when: (1) writing any new AWS resource block and need to confirm exact argument names and types via get-resource-docs, (2) looking up data source schemas via get-datasource-docs, (3) discovering providers or modules via search-opentofu-registry, (4) inspecting provider configuration ...Votes: 0GitHub stars: 2
- Opentofu Module LayoutStandardised architecture, file layout, variable conventions, provider configuration, tagging standards, OCI registry module distribution, and end-to-end module authoring workflow for production-grade OpenTofu modules. Use when: (1) creating, scaffolding, or structuring OpenTofu modules, (2) setting up versions.tf/provider.tf/variables.tf/ outputs.tf/main.tf, (3) defining variable declarations with type, description, validation, and sensitive attributes, (4) configuring the AWS provider with ...Votes: 0GitHub stars: 2
- Opentofu State ManagementOpenTofu-native state management patterns covering client-side AES-256-GCM state encryption, native S3 state locking without DynamoDB, and KMS key rotation with fallback blocks. Use when: (1) configuring state encryption using the encryption block with aws_kms key_provider, (2) enabling enforced encryption to prevent accidental plaintext state writes, (3) implementing key rotation with fallback blocks for zero-downtime migration, (4) configuring native S3 locking via use_lockfile = true, or (...Votes: 0GitHub stars: 2
- Opentofu Testing ValidationTesting, validation, and policy enforcement patterns for OpenTofu modules covering lifecycle preconditions and postconditions, the native .tftest.hcl testing framework, and Open Policy Agent (OPA) / Conftest integration. Use when: (1) embedding precondition checks to validate assumptions before resource creation, (2) embedding postcondition checks to verify guarantees after resource creation, (3) authoring .tftest.hcl test files with run blocks and assert blocks, (4) writing negative tests wi...Votes: 0GitHub stars: 2
- Opentofu Vpc NetworkingVPC networking patterns for OpenTofu AWS modules covering VPC endpoint provisioning strategies, private connectivity prioritisation, Gateway endpoints (S3, DynamoDB), Interface endpoints (PrivateLink), and cost-aware routing decisions. Use when: (1) deploying aws_vpc_endpoint resources for AWS services, (2) distinguishing between Gateway and Interface endpoint implementations, (3) configuring route table associations for Gateway endpoints, (4) placing Interface endpoints in private subnets wi...Votes: 0GitHub stars: 2
- Aws Data Security EnforcementComprehensive guidance and HCL standards for enforcing security across AWS storage and data plane resources (S3, RDS, EBS, DynamoDB, SQS, Secrets Manager) in Terraform. Use when generating, auditing, or refactoring Terraform code for: (1) Enforcing server-side encryption at rest using KMS CMK or SSE, (2) Implementing public access blocking and private network/policy isolation, or (3) Enforcing TLS/SSL in-transit encryption using resource policies (aws:SecureTransport) and DB parameter groups.Votes: 0GitHub stars: 2
- Aws Iam Policy EngineComprehensive guidance and HCL standards for constructing secure, composable, service-level AWS resource policies (S3, KMS, SNS, SQS, ECR, Secrets Manager) in Terraform. Use when generating, auditing, or refactoring AWS service-level IAM resource policies for: (1) Same-account, cross-account, or AWS Organization access control, (2) Converting raw JSON/heredoc policies to native aws_iam_policy_document HCL data sources, (3) Implementing least privilege rules, SSL enforcement (aws:SecureTranspo...Votes: 0GitHub stars: 2
- Aws Vpc Network PatternsArchitectural standards and Terraform HCL implementation patterns for AWS VPC networking, subnet tiering, routing, VPC endpoints, and security groups. Use when designing, building, or auditing AWS network infrastructure in Terraform, including: (1) Designing multi-tier VPC topologies (public, private app, isolated database), (2) Calculating dynamic subnet CIDRs using cidrsubnet(), (3) Configuring NAT Gateways, Internet Gateways, and Route Tables, (4) Setting up Gateway and Interface VPC Endpo...Votes: 0GitHub stars: 2
- Terraform Iteration PatternsHCL iteration, transformation, and validation patterns for production Terraform modules. Covers map-driven for_each, flatten() for nested structures, dynamic blocks (conditional, iterated, nested), filtered for_each, ARN composition (join, lookup, formatlist), safe access with try()/can(), guardrail maps with plan-time filemd5() validation, locals as a data transformation layer, defaults merging, and event notification patterns. Use when: (1) authoring resources that iterate over map(any) inp...Votes: 0GitHub stars: 2
- Terraform Mcp Schema LookupWorkflow for querying terraform-mcp-server to inspect AWS provider resource schemas, verify required vs optional arguments, check exported attributes, and detect deprecated arguments before writing or editing Terraform HCL code. Use when: (1) writing any new AWS resource block and need to confirm exact argument names and types, (2) adding outputs and need to verify exported resource attributes (.arn, .id, .endpoint), (3) checking whether an argument or inline block is deprecated in AWS Provid...Votes: 0GitHub stars: 2
- Terraform Module LayoutStandardized architecture, file layout, variable conventions, formatting rules, cross-account dependency patterns, remote state integration, central tagging, submodule extraction rules, and end-to-end module authoring workflow for production-grade Terraform modules. Use when: (1) creating, scaffolding, or structuring Terraform modules, (2) setting up main.tf/locals.tf/variables.tf/ outputs.tf/versions.tf/central_tag.tf/dependencies.tf, (3) defining variable declaration standards and map(any) ...Votes: 0GitHub stars: 2
- Terraform Repair LoopIterative self-healing repair loop workflow for Terraform modules. Evaluates compilation and linter outputs from terraform validate, terraform plan, and tflint, diagnoses error root causes, and applies surgical HCL code edits during automated remediation turns. Use when fixing build/validation failures, resolving HCL syntax or reference errors, addressing tflint warnings/errors, or executing automated self-healing code edits.Votes: 0GitHub stars: 2
- Jenkins Job Dsl JcascJenkins Job DSL API and Configuration as Code (JCasC) integration for programmatic job management. Covers Job DSL seed job generation, JCasC inline DSL to bypass Groovy Sandbox approval, multibranchPipelineJob and organizationFolder authoring, SCM branch source trait configuration (BranchDiscoveryTrait, OriginPullRequestDiscoveryTrait, ForkPullRequestDiscoveryTrait with TrustPermission/TrustContributors/TrustNobody), configure block for raw XML manipulation, and security best practices (crede...Votes: 0GitHub stars: 2
- Jenkins Pipeline GenerationAdvanced Declarative Pipeline generation for Jenkins covering pipeline {} block architecture, containerised agent allocation (Docker, Kubernetes pod templates), matrix builds with axes/excludes, parallel stages with executor starvation prevention, pipeline options (disableConcurrentBuilds, parallelsAlwaysFailFast, timeout), post-execution conditions, and autonomous syntax validation via the Jenkins REST API pipeline-model-converter/validate endpoint with CSRF crumb tokens. Use when: (1) gener...Votes: 0GitHub stars: 2
- Jenkins Pipeline TestingUnit testing for Jenkins Shared Libraries using JenkinsPipelineUnit framework with Spock and JUnit. Covers test class construction extending BasePipelineTest and JenkinsPipelineSpecification, mocking Jenkins pipeline steps via helper.registerAllowedMethod() and helper.addShMock(), file system mocking via helper.addFileExistsMock() and helper.addReadFileMock(), pipeline status assertion (currentBuild.result), global variable testing via loadScript(), call stack verification via printCallStack(...Votes: 0GitHub stars: 2
- Jenkins Shared LibrariesProduction-grade Jenkins Shared Library engineering covering strict directory structure segregation (vars/, src/, resources/), global variable authoring with def call() patterns, CPS transformation constraints and java.io.NotSerializableException avoidance, @NonCPS annotation rules (FATAL: never call pipeline steps from @NonCPS), Serializable implementation requirements, and libraryResource asset loading. Use when: (1) scaffolding shared library directory structures, (2) writing global pipeli...Votes: 0GitHub stars: 2
- Github Actions ArchitectureGuidelines for structuring modular GitHub Actions CI/CD pipelines using reusable workflows (workflow_call) and composite actions (runs.using: composite). Use when: (1) creating CI/CD pipelines with more than 3 stages, (2) refactoring monolithic workflow YAML into reusable components, (3) building reusable workflow templates with typed input schemas and secret inheritance, (4) authoring composite actions with shell specifications and github.action_path resolution, or (5) targeting ephemeral se...Votes: 0GitHub stars: 2
- Github Actions PerformancePerformance optimization, state management, and v4 artifact compliance for GitHub Actions workflows. Covers deterministic dependency caching with actions/cache@v4, built-in setup action caching, v4 artifact immutability constraints (unique naming, hidden files, 500 artifact limit), and concurrency control for queue management. Use when: (1) optimising slow builds with dependency caching, (2) uploading or downloading build artifacts between jobs, (3) configuring concurrency groups to cancel re...Votes: 0GitHub stars: 2
- Github Actions Security HardeningEnforces security best practices for GitHub Actions: least-privilege token scoping, SHA-pinned dependency immutability, credential persistence prevention (zizmor artipacked rule), OIDC cloud authentication, and static analysis integration (zizmor, actionlint, OpenSSF Scorecard). Use whenever: (1) generating any new workflow file, (2) performing a security review or audit of an existing pipeline, (3) configuring cloud provider access (AWS, Azure, GCP) via OIDC, (4) setting up zizmor or actionl...Votes: 0GitHub stars: 2
- Github Actions Vulnerability MitigationMitigates critical GitHub Actions attack vectors including Pwn Requests (pull_request_target abuse), script injection via untrusted context variable interpolation, artifact poisoning through workflow_run, and supply chain breaches via tag mutability. Use when: (1) handling pull_request_target, issue_comment, or workflow_run triggers, (2) processing external data from untrusted fork repositories, (3) interpolating GitHub context variables in shell scripts, (4) downloading and consuming artifac...Votes: 0GitHub stars: 2
- Ansible Code AuthoringIdiomatic Ansible code authoring patterns covering declarative YAML conventions, strict idempotency enforcement, Fully Qualified Collection Names (FQCN), module selection over shell commands, and MCP knowledge base grounding. Use when: (1) writing playbook tasks, roles, or handlers, (2) enforcing idempotency via changed_when, creates, and removes parameters, (3) selecting specialised modules over shell/command, (4) querying zen_of_ansible or ansible_content_best_practices MCP endpoints, (5) c...Votes: 0GitHub stars: 2
- Ansible Environment SetupEnvironment discovery, automated configuration, and project scaffolding for Ansible workspaces. Use when: (1) assessing the host environment for installed Ansible Core, Python version, virtual environments, and available collections via ade_environment_info, (2) provisioning isolated Python environments and installing dependencies via ade_setup_environment, (3) scaffolding collection structures with galaxy.yml, plugins/, roles/, and playbooks/ via ansible_create_collection, (4) scaffolding pl...Votes: 0GitHub stars: 2
- Ansible Execution EnvironmentsExecution Environment (EE) engineering for containerised Ansible runtimes using Ansible Builder. Covers Version 3 schema compliance, dependency mapping (requirements.yml, requirements.txt, bindep.txt), base container image selection, and additional_build_steps for custom Containerfile/Dockerfile injection. Use when: (1) designing execution-environment.yml definition files, (2) validating EE definitions against schema://execution-environment and rules://execution-environment MCP resources, (3)...Votes: 0GitHub stars: 2
- Ansible Linting RemediationCode quality validation and autonomous remediation using ansible-lint via the ansible_lint MCP tool. Covers profile-driven validation (min through production), two-phase remediation (automated fix + semantic repair), and SARIF/JSON output parsing. Use when: (1) validating playbook or role code quality via ansible_lint, (2) selecting and configuring lint profiles (min, basic, moderate, safety, shared, production), (3) auto-fixing formatting issues with fix:true, (4) parsing structured lint out...Votes: 0GitHub stars: 2
- Ansible Mcp Schema LookupWorkflow for querying the Ansible MCP server to discover available tools, inspect resource schemas, access documentation endpoints, and validate definitions before code generation. Use when: (1) discovering available MCP tools and their parameter signatures via list_available_tools, (2) querying zen_of_ansible or ansible_content_best_practices for philosophy and conventions, (3) reading guidelines://ansible-content-best-practices resource URI for deep project structure standards, (4) validati...Votes: 0GitHub stars: 2
- Ansible Runner ExecutionProduction playbook execution via Ansible Runner and Ansible Navigator, covering private_data_dir structure, inventory mapping, environment configuration, artifact consumption, and event-driven remediation. Use when: (1) structuring the private_data_dir for Ansible Runner (/project, /inventory, /env/settings, /env/envvars, /env/extravars), (2) executing playbooks via ansible_navigator MCP tool, (3) parsing execution artifacts from /artifacts for task-level success/failure events, (4) consumin...Votes: 0GitHub stars: 2
- Ansible Security OperationsSecurity operations for Ansible automation covering privilege escalation management (become, sudoers.d), Ansible Vault secrets encryption, credential handling for Runner/Navigator, and observability data privacy. Use when: (1) configuring privilege escalation with become directives and passwordless sudo, (2) writing sudoers.d drop-in configurations with visudo validation, (3) encrypting sensitive variables with ansible-vault encrypt_string, (4) injecting vault passwords into Ansible Runner en...Votes: 0GitHub stars: 2
- Helm Chart AuthoringProduction-grade Helm chart structuring, naming conventions, values management, and template patterns. Use when: (1) creating new Helm charts with proper directory layouts, (2) enforcing chart naming (lowercase-hyphenated) and variable naming (camelCase) conventions, (3) structuring values.yaml with flat-over-deep patterns and type coercion rules, (4) managing subchart variable overrides in umbrella charts, (5) scoping global values via .Values.global, or (6) applying SemVer 2.0.0 versioning ...Votes: 0GitHub stars: 2
- Helm Deployment RecoveryDefensive Helm deployment operations and operational recovery for stuck releases. Covers atomic upgrades with --cleanup-on-fail, pre-deployment diffs via helm-diff, and deadlock resolution for pending-upgrade/pending-install/pending-rollback states via helm rollback and Kubernetes secret ledger manipulation. Use when: (1) executing helm upgrade --install with atomic and cleanup-on-fail flags, (2) previewing deployment changes via helm diff upgrade with --detailed-exitcode, (3) diagnosing rele...Votes: 0GitHub stars: 2
- Helm Schema ValidationJSON Schema enforcement for Helm charts via values.schema.json. Covers JSON Schema draft-07 construction, type definitions, required arrays, pattern regex validation, enum restrictions, and automatic Helm validation during install/upgrade. Use when: (1) creating values.schema.json for a new chart, (2) defining mandatory parameters with required arrays, (3) enforcing string format constraints with pattern regex, (4) restricting allowed values with enum, (5) validating user-supplied value overr...Votes: 0GitHub stars: 2
- Helm Security SecretsKubernetes security enforcement and cryptographic secrets management for Helm charts. Covers Pod Security Admission (PSA) restricted profiles, hardened securityContext (runAsNonRoot, readOnlyRootFilesystem, allowPrivilegeEscalation), NetworkPolicies with default-deny posture, and SOPS/helm-secrets/age encryption for cryptographic materials. Use when: (1) writing pod securityContext blocks, (2) enforcing PSA restricted profiles, (3) configuring default-deny NetworkPolicies, (4) integrating SOP...Votes: 0GitHub stars: 2
- Helm TestingMulti-layered automated testing for Helm charts covering template unit testing (helm-unittest), integration testing (chart-testing / ct), and native Helm test hooks. Use when: (1) authoring YAML unit tests with helm-unittest assertions (isKind, equal, matchRegex, hasDocuments), (2) generating ct.yaml configuration for chart-testing (ct lint, ct install), (3) writing Helm test hook pods with helm.sh/hook: test annotations, (4) configuring hook-delete-policy for post-test cleanup, or (5) valida...Votes: 0GitHub stars: 2