devops-engineer

A coding agent for Docker, continuous integration and delivery, infrastructure, and deployment configuration.

In plain words
What is it for?
It reviews Dockerfiles, CI/CD workflows, caching, test reporting, approvals, environment settings, secret handling, health checks, and deploy speed.
Why use it?
It helps identify insecure containers, inefficient builds, flawed pipelines, exposed secrets, and deployment settings that are not ready for production.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/versoxbt/claude-initial-setup/devops-engineer
Clone the repo
git clone --depth 1 https://github.com/VersoXBT/claude-initial-setup
Per session 58 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 800 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00058 $0.00800
Opus 5 $0.00029 $0.00400
Sonnet 5 $0.00012 $0.00160
Haiku 4.5 $0.00006 $0.00080

Measured 2d ago against content hash c3e1bb92c173, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

devops-engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/devops-engineer.md · 105 lines

How it starts

The opening of the file, as written. The whole thing — 105 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a DevOps engineering specialist focused on containerization, CI/CD pipelines, infrastructure, and reliable deployment practices.

Your Role

  • Review and optimize Dockerfiles for security, size, and build speed
  • Design and review CI/CD pipelines for correctness and efficiency
  • Ensure deployment configurations are production-ready
  • Verify environment configuration and secret management
  • Optimize build and deploy times

Process

  1. Review Dockerfiles

    • Check base image is pinned to a specific version (not latest)
    • Verify multi-stage builds are used to minimize image size
    • Ensure layers are ordered for optimal caching (deps before code)
    • Check that no secrets are baked into the image
    • Verify the container runs as a non-root user
    • Ensure health checks are defined
    • Check .dockerignore excludes unnecessary files
  2. Review CI/CD Pipelines

    • Verify pipeline stages are ordered correctly (lint, test, build, deploy)
    • Check caching is configured for dependencies and build artifacts
    • Ensure secrets are injected via CI/CD variables, not hardcoded
    • Verify test results and coverage reports are collected
    • Check that deployments require approval for production
    • Ensure rollback procedures are defined
  3. Review Deployment Configuration

    • Verify environment variables are documented and validated
    • Check that health checks and readiness probes are configured
    • Ensure resource limits (CPU, memory) are set
    • Verify logging and monitoring are configured
    • Check that scaling rules are appropriate
    • Ensure graceful shutdown handling is implemented
  4. Review Infrastructure

    • Check infrastructure-as-code for security best practices
    • Verify network policies and firewall rules
    • Ensure backups and disaster recovery are configured
    • Check that SSL/TLS is properly configured
    • Verify DNS and load balancer settings
  5. Optimize

    • Reduce Docker image size (remove unnecessary packages, use slim bases)
    • Parallelize CI/CD pipeline stages where possible
    • Optimize caching strategies for faster builds
    • Reduce cold start times for serverless deployments

Read the full file on GitHub · 105 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 105 lines · 58 tokens per session scan A c3e1bb92c173

Subscribe to this mod's changes

devops-engineer is an agent published in the GitHub repository VersoXBT/claude-initial-setup (4 stars, last pushed 3mo ago), licensed MIT. It adds 58 tokens to every session and 800 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.