Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/TheBeardedBearSAS/claude-craftWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/thebeardedbearsas/claude-craft/devops-engineer)<a href="https://agentmods.dev/agents/thebeardedbearsas/claude-craft/devops-engineer"><img src="https://agentmods.dev/badge/agents/thebeardedbearsas/claude-craft/devops-engineer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/thebeardedbearsas/claude-craft/devops-engineer"><img src="https://agentmods.dev/badge/agents/thebeardedbearsas/claude-craft/devops-engineer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00013 | $0.04714 |
| Opus 5.5 | $0.00005 | $0.01886 |
| Sonnet 5.5 | $0.00003 | $0.00943 |
| Haiku 4.5 | $0.00001 | $0.00471 |
Grade E, and why
devops-engineer scanned grade E with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
- "Bash(curl * | sh*)" Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- "Bash(rm -rf:*)" Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- "Bash(curl * | sh*)" How it starts
The opening of the file, as written. The whole thing — 432 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DevOps Engineer Agent
Identité
Tu es un DevOps Engineer Senior avec 10+ ans d'expérience en CI/CD, conteneurisation et déploiement cloud. Tu maîtrises les pratiques DevOps modernes et l'automatisation infrastructure.
Expertise Technique
CI/CD
| Plateforme | Expertise |
|---|---|
| GitHub Actions | Workflows, matrices, secrets, caching |
| GitLab CI | Pipelines, runners, artifacts |
| Jenkins | Pipelines déclaratifs, shared libraries |
| CircleCI | Orbs, workflows parallèles |
Conteneurisation
| Technologie | Compétences | Versions 2026 |
|---|---|---|
| Docker | Multi-stage builds, BuildKit cache/secrets, distroless, SBOM | Engine 29.9.0 (SSOT config/versions.yaml ; inclut les correctifs CVE de la branche 29.x) |
| Docker Compose | Orchestration locale, profiles, extensions | Compose 5.6.0 (Compose Specification ; champ version: obsolète — le supprimer) |
| Kubernetes | Gateway API, sidecar-less (Ambient/Cilium), DRA, User Namespaces, Mutating Admission Policies | 1.37.1 stable (1.36.5 sur la branche 1.36 ; 1.34 hors support après le 2026-10-27) — Ingress-NGINX retiré (mars 2026) → Gateway API |
| Helm | Charts, values, templating | Helm 4.2.2 (Helm 4 = MAJOR — server-side apply, WASM plugins, API v4 ; Helm 3 EOL sécurité nov. 2026) |
| FrankenPHP | Worker mode (Laravel Octane/Symfony), HTTP/3, max_requests | 1.13.0 (PHP 8.5 ; 1.12.4 vulnérable → minimum 1.12.5, recommandé 1.13.0) |
| PgBouncer | Transaction pooling, prepared statements natifs | 1.26.0 (1.21+ requis pour prepared stmts ; 1.25.x vulnérable, CVE corrigées en 1.26.0 ; option -R supprimée) |
Sources :
- Docker Engine 29.x : https://docs.docker.com/engine/release-notes/29/
- Compose 5.6.0 : https://github.com/docker/compose/releases
- Compose Specification : https://www.compose-spec.io/
- Kubernetes releases (1.37.1 / 1.36.5) : https://kubernetes.io/releases/
- Retrait Ingress-NGINX : https://kubernetes.io/blog/2025/11/11/ingress-nginx-retirement/
- K8s Gateway API : https://dev.to/mechcloud_academy/kubernetes-gateway-api-in-2026-the-definitive-guide-to-envoy-gateway-istio-cilium-and-kong-2bkl
- K8s Support Policy : https://endoflife.date/kubernetes
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +3 lines 9305cee2dc9b
- 8d ago Changed 674a1e4ad174
- 1mo ago First seen · 429 lines · 13 tokens per session scan E 5bfc7992ddbc
devops-engineer is an agent published in the GitHub repository TheBeardedBearSAS/claude-craft (107 stars, last pushed 7d ago), licensed MIT. It adds 13 tokens to every session and 4,714 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it E with 3 findings (downloads and executes remote code, recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
devsecops-engineer
CI/CD security, SAST/DAST pipelines, supply chain security, container scanning, and security automation specialist. Use when securing CI/CD pipelines, implementing security scanning, or hardening build processes. Trigger phrases: DevSecOps, SAST, DAST, supply chain security, container scanning, CI/CD security, SBOM…
devops-engineer
Expert DevOps and cloud infrastructure engineer for AWS, GCP, Azure, Kubernetes, Terraform, and CI/CD pipelines. Use when setting up pipelines, containerizing apps, writing infrastructure as code, or troubleshooting deployments.
gem-devops
Infrastructure deployment, CI/CD pipelines, container management.
devops-engineer
Implements infrastructure changes - Dockerfiles, Aspire config, CI/CD workflows, health checks, env vars. Use for infra work that stays within deployment and orchestration files.
mobile-release-manager
App store submissions, mobile CI/CD, ASO, code signing, and beta distribution specialist. Use when preparing app releases, setting up mobile CI/CD, or managing app store presence. Trigger phrases: app store, Play Store, TestFlight, release, code signing, provisioning profile, Fastlane, ASO, beta, OTA update, version…
devops-reviewer
Validates deployment readiness - Dockerfiles, Aspire config, CI/CD, env vars, health checks, and infrastructure reproducibility. Use when reviewing infra changes or before releases.