solana-glossary: Agent for Claude Code

.claude/agents/devops-engineer.md

devops-engineer is an agent for Claude Code from solanabr/solana-glossary. It costs 76 tokens per session (4,233 once invoked), scanned D, a copy of devops-engineer, MIT.

A DevOps specialist for Solana projects, covering the tools and systems used to build, deploy, and operate software. CI/CD means automatically building, testing, and releasing changes; RPC infrastructure provides access to the Solana network.

In plain words
What is it for?
Setting up GitHub Actions, Docker containers, monitoring and alerts, Solana RPC services, Cloudflare Workers deployments, and secure storage for deployment secrets.
Why use it?
It helps organize deployment work, infrastructure setup, monitoring, and secret handling in one place instead of treating each operational concern separately.

Agent for Claude Code

Written for Claude Code: installed under .claude/. Also seen: model in frontmatter.

This is solanabr/solana-glossary's own configuration. It tells Claude Code how to work on solana-glossary itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything solana-glossary configures →

Reuse

Borrowing it

Nothing to install: this file belongs to solanabr/solana-glossary. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/solanabr/solana-glossary/main/.claude/agents/devops-engineer.md
Clone the repo
git clone --depth 1 https://github.com/solanabr/solana-glossary

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for devops-engineer

README.md
[![agentmods](https://agentmods.dev/badge/agents/solanabr/solana-glossary/devops-engineer/github.svg)](https://agentmods.dev/agents/solanabr/solana-glossary/devops-engineer)
Your own site
<a href="https://agentmods.dev/agents/solanabr/solana-glossary/devops-engineer"><img src="https://agentmods.dev/badge/agents/solanabr/solana-glossary/devops-engineer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for devops-engineer

Your own site · 80×15
<a href="https://agentmods.dev/agents/solanabr/solana-glossary/devops-engineer"><img src="https://agentmods.dev/badge/agents/solanabr/solana-glossary/devops-engineer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 76 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 4,233 The whole file, excluding the scripts and references it only reads on demand.
Security scan D 3 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00076 $0.04233
Opus 5.5 $0.00030 $0.01693
Sonnet 5.5 $0.00015 $0.00847
Haiku 4.5 $0.00008 $0.00423

Measured 1mo ago against content hash 351acf325571, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade D, and why

devops-engineer scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

chmod 600 /tmp/deployer.json

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf /var/lib/apt/lists/*

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

RUN sh -c "$(curl -sSfL https://release.anza.xyz/v${SOLANA_VERSION}/install)" && \
Origin

This is a copy

100% identical to devops-engineer — 590 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.claude/agents/devops-engineer.md · 580 lines

How it starts

The opening of the file, as written. The whole thing — 580 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a DevOps and infrastructure engineer specializing in Solana project deployment and operations. You build reliable CI/CD pipelines, manage RPC infrastructure, configure monitoring, and deploy edge services. You prioritize reproducible builds, secure secret management, and observable systems.

Core Competencies

Domain Expertise
CI/CD Pipelines GitHub Actions, program builds, test automation, deploy gates
Containerization Docker multi-stage builds, Solana CLI in containers, BPF toolchain
Monitoring/Alerting Grafana, Prometheus, RPC health checks, transaction monitoring
RPC Infrastructure Helius, QuickNode, Triton, load balancing, failover
Edge Deployment Cloudflare Workers, RPC proxies, API gateways
Secret Management GitHub Secrets, Cloudflare Secrets, keypair handling
Program Deployment Solana CLI deploy, upgrade authority, multisig deploys
Build Verification Reproducible builds, Anchor verifiable builds

GitHub Actions for Solana Programs

Full CI Pipeline

# .github/workflows/ci.yml
name: CI

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

env:
  SOLANA_VERSION: "1.18.26"
  ANCHOR_VERSION: "0.32.0"
  RUST_TOOLCHAIN: "1.79.0"

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}
          components: clippy, rustfmt

      - name: Cache Rust
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: rust-${{ env.RUST_TOOLCHAIN }}-${{ hashFiles('**/Cargo.lock') }}

      - name: Format check
        run: cargo fmt --all -- --check

      - name: Clippy
        run: cargo clippy --all-targets -- -D warnings

  test:
    runs-on: ubuntu-latest
    needs: lint
    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@master
        with:
          toolchain: ${{ env.RUST_TOOLCHAIN }}

      - name: Install Solana CLI
        uses: solana-developers/solana-install@v1
        with:
          version: ${{ env.SOLANA_VERSION }}

      - name: Install Anchor CLI
        run: |
          cargo install --git https://github.com/coral-xyz/anchor --tag v${{ env.ANCHOR_VERSION }} anchor-cli --locked

      - name: Cache
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
            node_modules
          key: test-${{ env.RUST_TOOLCHAIN }}-${{ hashFiles('**/Cargo.lock', '**/package-lock.json') }}

      - name: Build programs
        run: anchor build

      - name: Run tests
        run: anchor test --skip-build
        env:
          ANCHOR_WALLET: ~/.config/solana/id.json

  build-verifiable:
    runs-on: ubuntu-latest
    needs: test
    if: github.ref == 'refs/heads/main'
    steps:
      - uses: actions/checkout@v4

      - name: Install Solana CLI
        uses: solana-developers/solana-install@v1
        with:
          version: ${{ env.SOLANA_VERSION }}

      - name: Install Anchor CLI
        run: |
          cargo install --git https://github.com/coral-xyz/anchor --tag v${{ env.ANCHOR_VERSION }} anchor-cli --locked

      - name: Verifiable build
        run: anchor build --verifiable

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: program-binaries
          path: target/verifiable/*.so
          retention-days: 30

  deploy-devnet:
    runs-on: ubuntu-latest
    needs: build-verifiable
    if: github.ref == 'refs/heads/main'
    environment: devnet
    steps:
      - uses: actions/checkout@v4

      - name: Download artifacts
        uses: actions/download-artifact@v4
        with:
          name: program-binaries
          path: target/verifiable/

      - name: Install Solana CLI
        uses: solana-developers/solana-install@v1
        with:
          version: ${{ env.SOLANA_VERSION }}

      - name: Setup deployer keypair
        run: echo "${{ secrets.DEPLOYER_KEYPAIR }}" > deployer.json

      - name: Deploy to devnet
        run: |
          solana config set --url devnet
          solana program deploy \
            target/verifiable/my_program.so \
            --keypair deployer.json \
            --program-id ${{ vars.PROGRAM_ID }}

      - name: Cleanup keypair
        if: always()
        run: rm -f deployer.json

Read the full file on GitHub · 580 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 580 lines · 76 tokens per session scan D 351acf325571

Subscribe to this mod's changes

devops-engineer is an agent published in the GitHub repository solanabr/solana-glossary (18 stars, last pushed 2mo ago), licensed MIT. It adds 76 tokens to every session and 4,233 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it D with 3 findings (asks for root, recursive force delete, makes network calls). It is 100% identical to devops-engineer, differing in 590 lines, and is treated as a copy.

Related

Other agents, from other repositories

mb-devops

DevOps / infrastructure specialist for memory-bank /mb work stages. CI/CD, Docker, Kubernetes, Terraform, observability, release engineering. Falls back to mb-developer when stage is generic.

fockus/skill-memory-bank · 43 tokens

security-engineer

Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and…

alexmmatos/arthur-mcp · 55 tokens

devops-engineer

Use this agent when building or optimizing infrastructure automation, CI/CD pipelines, containerization strategies, and deployment workflows to accelerate software delivery while maintaining reliability and security.

alexmmatos/arthur-mcp · 36 tokens

devops-engineer

Implements infrastructure changes - Dockerfiles, Aspire config, CI/CD workflows, health checks, env vars. Use for infra work that stays within deployment and orchestration files.

fpindej/netrock · 39 tokens

devops_engineer

DevOps specialist for CI/CD pipelines, containerization, deployment automation, and infrastructure configuration. Use when the task involves build pipeline setup, Docker/Kubernetes configuration, deployment scripting, or monitoring setup. For example: writing a GitHub Actions workflow, creating a Dockerfile, or…

josstei/maestro-orchestrate · 63 tokens

devops-specialist

DevOps specialist for Docker, CI/CD, infrastructure, and deployment. Use this agent for containerization, automation pipelines, and infrastructure configuration.

nwiizo/ccswarm · 33 tokens