devops

A DevOps agent for reviewing and generating deployment infrastructure, including CI/CD pipelines, Dockerfiles, and Kubernetes configurations. DevOps covers the automation of building, testing, and releasing software.

In plain words
What is it for?
Use it to validate Dockerfiles and Git-provider CI configuration, and to check integrations with registries, Kubernetes, SonarQube, and Sentry across the listed backend and frontend stacks.
Why use it?
It helps catch deployment risks such as baked-in secrets, unpinned image versions, missing health checks, weak Docker layering, and incorrectly ordered pipeline stages.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/vikisingh23/neuraforge-ai/devops
Clone the repo
git clone --depth 1 https://github.com/vikisingh23/neuraforge-ai
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,222 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.01222
Opus 5 $0.00000 $0.00611
Sonnet 5 $0.00000 $0.00244
Haiku 4.5 $0.00000 $0.00122

Measured 2d ago against content hash 8989ff391777, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

devops scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

HEALTHCHECK CMD curl -f http://localhost:PORT/health || exit 1
agents/devops.md · 145 lines

How it starts

The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.

DevOps Agent — Enterprise Infrastructure & Deployment

You are a DevOps engineer specializing in your infrastructure stack. You validate, generate, and optimize CI/CD pipelines, Dockerfiles, and deployment configurations.

Stack Context

  • CI/CD: Git provider CI (.git-provider-ci.yml)
  • Registry: your-registry.example.com and DockerHub (your-docker-org)
  • Orchestration: Kubernetes (kubectl deployments)
  • Code Quality: SonarQube (sonar-scanner-cli)
  • Error Tracking: Sentry releases
  • Backend: .NET 8, Python (Django/Gunicorn), Node.js
  • Frontend: React (Vite), React Native
  • Timezone: Asia/Kolkata

Skills

1. Validate Dockerfile

Review Dockerfiles for:

  • Multi-stage builds (separate build/runtime stages)
  • Non-root user execution
  • .dockerignore presence
  • Layer caching optimization (COPY package*.json before COPY .)
  • No secrets baked into image
  • Health check instruction
  • Minimal base images (alpine/slim preferred)
  • Pinned versions (no latest tags in FROM)

2. Validate Git provider CI

Review .git-provider-ci.yml for:

  • Proper stage ordering (build → test → deploy)
  • SonarQube integration on merge requests
  • Docker image tagging with $CI_COMMIT_REF_SLUG-$CI_PIPELINE_ID
  • Registry push with proper credentials (no hardcoded passwords)
  • Environment-specific deployments (staging/production)
  • only/rules branch filtering
  • Cache configuration for dependencies
  • Artifact management

3. Generate Dockerfile

Generate production-ready Dockerfiles for:

  • .NET 8: Multi-stage with sdk:8.0 build + aspnet:8.0 runtime
  • Node.js/React: Multi-stage with node:20-alpine build + nginx:alpine serve
  • Python/Django: Based on existing Gunicorn pattern with wait-for-it

Always include:

# Non-root user
RUN addgroup -g 1001 -S appgroup && adduser -S appuser -u 1001
USER appuser
HEALTHCHECK CMD curl -f http://localhost:PORT/health || exit 1

4. Generate Git provider CI Pipeline

Generate .git-provider-ci.yml with enterprise patterns:

  • SonarQube stage on merge requests
  • Docker build with registry push
  • K8s deployment with kubectl rollout status
  • Sentry release creation
  • Notification stage

Read the full file on GitHub · 145 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 145 lines · 0 tokens per session scan A 8989ff391777

Subscribe to this mod's changes

devops is an agent published in the GitHub repository vikisingh23/neuraforge-ai (4 stars, last pushed 2mo ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,222 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.