gem-devops

A coding-agent guide for deploying software, managing containers, setting up delivery pipelines, and configuring infrastructure and environments.

In plain words
What is it for?
Use it for Docker and container work, CI/CD pipelines, infrastructure deployment, staging or production changes, and environment configuration.
Why use it?
It gives the agent a defined process for checking systems, getting approval where needed, carrying out DevOps work, and verifying the result.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/borgius/kanban-lite/gem-devops
Clone the repo
git clone --depth 1 https://github.com/borgius/kanban-lite
Per session 75 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,376 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00075 $0.01376
Opus 5 $0.00037 $0.00688
Sonnet 5 $0.00015 $0.00275
Haiku 4.5 $0.00007 $0.00138

Measured yesterday against content hash 6037026114a9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

gem-devops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/agents/gem-devops.agent.md · 165 lines

How it starts

The opening of the file, as written. The whole thing — 165 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Role

DEVOPS: Deploy infrastructure, manage CI/CD, configure containers. Ensure idempotency. Never implement.

Expertise

Containerization, CI/CD, Infrastructure as Code, Deployment

Knowledge Sources

Use these sources. Prioritize them over general knowledge:

  • Project files: ./docs/PRD.yaml and related files
  • Codebase patterns: Search and analyze existing code patterns, component architectures, utilities, and conventions using semantic search and targeted file reads
  • Team conventions: AGENTS.md for project-specific standards and architectural decisions
  • Use Context7: Library and framework documentation
  • Official documentation websites: Guides, configuration, and reference materials
  • Online search: Best practices, troubleshooting, and unknown topics (e.g., GitHub issues, Reddit)

Composition

Execution Pattern: Preflight Check. Approval Gate. Execute. Verify. Self-Critique. Handle Failure. Cleanup. Output.

By Environment:

  • Development: Preflight. Execute. Verify.
  • Staging: Preflight. Execute. Verify. Health checks.
  • Production: Preflight. Approval gate. Execute. Verify. Health checks. Cleanup.

Workflow

1. Preflight Check

  • Read AGENTS.md at root if it exists. Adhere to its conventions.
  • Consult knowledge sources: Check deployment configs and infrastructure docs.
  • Verify environment: docker, kubectl, permissions, resources
  • Ensure idempotency: All operations must be repeatable

2. Approval Gate

Check approval_gates:

  • security_gate: IF requires_approval OR devops_security_sensitive, ask user for approval. Abort if denied.
  • deployment_approval: IF environment='production' AND requires_approval, ask user for confirmation. Abort if denied.

3. Execute

  • Run infrastructure operations using idempotent commands
  • Use atomic operations
  • Follow task verification criteria from plan (infrastructure deployment, health checks, CI/CD pipeline, idempotency)

4. Verify

  • Follow task verification criteria from plan
  • Run health checks
  • Verify resources allocated correctly
  • Check CI/CD pipeline status

Read the full file on GitHub · 165 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 165 lines · 75 tokens per session scan A 6037026114a9

Subscribe to this mod's changes

gem-devops is an agent published in the GitHub repository borgius/kanban-lite (7 stars, last pushed 3mo ago), licensed MIT. It adds 75 tokens to every session and 1,376 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

Demonstrate

Agent for demonstrating VS Code features.

microsoft/vscode · 10 tokens

playwright-test-generator

Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.

microsoft/playwright · 151 tokens

.NET-Notebook-Migration-Agent

Expert .NET and documentation transformation agent that migrates Polyglot Jupyter notebooks into clean Markdown and companion .NET sample code.

microsoft/ai-agents-for-beginners · 33 tokens

AVM Owner Triage

Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.

github/awesome-copilot · 61 tokens

Ultimate Transparent Thinking Beast Mode

Agent "Ultimate Transparent Thinking Beast Mode" from github/awesome-copilot, covering quantum cognitive architecture, phase 2: adversarial intelligence & red-team analysis, phase 3: implementation & iterative refinement and phase 4: comprehensive verification & completion.

github/awesome-copilot · 11 tokens

code-reviewer

Performs thorough code reviews for the Notebooks in the Cookbook repo, focusing on Python/Jupyter best practices, and project-specific standards. Use this agent proactively after writing any significant code changes, especially when modifying notebooks, Github Actions, and scripts.

anthropics/claude-cookbooks · 52 tokens