jochenyang/devops-engineer
skills/devops-engineer/SKILL.md
CI/CD pipeline design, containerization, and infrastructure management. Handles Docker, Kubernetes, monitoring setup (Prometheus/Grafana), and infrastructure-as-code (Terraform/Pulumi). Use when user asks to deploy, configure CI/CD, set up Docker/K8s, or manage infrastructure.
$ install --global
skillsauthnpx skillsauth add jochenyang/jochen-ai-rules devops-engineerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 10:14 AM11.5s1 file scanned
SKILL.md
- name:
- devops-engineer
- description:
- CI/CD pipeline design, containerization, and infrastructure management. Handles Docker, Kubernetes, monitoring setup (Prometheus/Grafana), and infrastructure-as-code (Terraform/Pulumi). Use when user asks to deploy, configure CI/CD, set up Docker/K8s, or manage infrastructure.
DevOps Engineer
Design and implement CI/CD processes, manage containerized deployments and monitoring/alerting systems.
Core Capabilities
- CI/CD pipeline design (GitHub Actions/GitLab CI/Jenkins)
- Docker image building and optimization
- Kubernetes deployment configuration
- Monitoring and alerting system setup (Prometheus/Grafana)
- Infrastructure as Code (Terraform/Pulumi)
Operational Research & Communication
- Vendor Evaluation: Compare cloud providers, remote access tools, and observability platforms
- Security Posture: Assess zero trust frameworks and rollout considerations
- Reliability Comms: Draft downtime notices with impact, timing, and contacts
- Incident Translation: Explain error logs in business-friendly language
Deployment Strategies
| Strategy | Principle | Use Case | |----------------|------------------------------------------|-----------------------| | Blue-Green | Two environments, instant traffic switch | Stable major releases | | Canary Release | Gradually increase new version traffic | High-risk changes | | Rolling Update | Replace instances one by one | Kubernetes default |
Monitoring Metrics (Golden Signals)
- Latency: Response time (P50, P95, P99)
- Traffic: Requests per second (RPS)
- Errors: Error rate
- Saturation: Resource utilization
Boundaries
Focus on CI/CD and infrastructure, not business code development.
When NOT to Use
- Writing application code → use
developer - Frontend UI development → use
frontend-design - API design → use
api-designer - Database schema design → use
database-engineer - Performance optimization → use
performance-optimizer
Detailed References
./references/docker-best-practices.md- Docker optimization guide./references/kubernetes-patterns.md- Kubernetes best practices
Escalation Rules
Pause and ask the owner before:
- making production-facing infrastructure changes without rollback clarity
- broadening infra work into unrelated application logic changes
- changing secrets, networking, domains, or runtime policies with user-facing impact
Final Output Contract (MANDATORY)
Every use of this skill should end with:
Skill Fit- why DevOps or infra work is appropriatePrimary Deliverable- pipeline, deployment, or infra change summaryExecution Evidence- configs edited, commands run, and checks performedRisks / Open Questions- rollout, reliability, or security concernsNext Action- the next safe validation or release step
Related Skills
jochenyang/reflect
databases
VerifiedTrustedCommunity
Review current conversation, analyze tasks, errors, and user feedback, extract learning opportunities for skill improvement. Use when user says "reflect", "review session", "what did we learn", "session summary", or after completing a complex task.
20SKILL.mdUpdated Apr 6, 2026
jochenyang/handoff
development
VerifiedTrustedCommunity
Create and resume structured manual session handoffs for long-running development work. Use when approaching context limits, before manual reset, before switching models or IDEs, after a milestone, or when automatic compact would lose important implementation state.
20SKILL.mdUpdated Apr 6, 2026
jochenyang/frontend-design
development
VerifiedTrustedCommunity
Implement distinctive, production-grade frontend UI code with strong visual direction, motion systems, local media asset generation, conversion-aware copy, and polished frontend execution. Use when building landing pages, marketing sites, product pages, dashboards, motion-heavy interfaces, or frontend experiences that need real assets and compelling copy.
20SKILL.mdUpdated Apr 6, 2026
jochenyang/context-codebase
development
VerifiedTrustedCommunity
Project context engine for repo orientation, cached handoff, and task-focused code retrieval.
20SKILL.mdUpdated Apr 6, 2026