Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/librefang/librefang-registry/devopsnpx skills add librefang/librefang-registry --skill devopsgit clone --depth 1 https://github.com/librefang/librefang-registryWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00029 | $0.10871 |
| Opus 5 | $0.00015 | $0.05436 |
| Sonnet 5 | $0.00006 | $0.02174 |
| Haiku 4.5 | $0.00003 | $0.01087 |
Grade A, and why
devops-hand-skill scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \ This is a copy
100% identical to devops-hand-skill — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 1,303 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DevOps Expert Knowledge
CI/CD Pipeline Patterns
GitHub Actions Reference
Basic workflow structure:
name: CI/CD Pipeline
on:
push:
branches: [main]
pull_request:
branches: [main]
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Build
run: make build
- name: Test
run: make test
- name: Lint
run: make lint
deploy:
needs: build
if: github.ref == 'refs/heads/main'
runs-on: ubuntu-latest
steps:
- name: Deploy
run: make deploy
Useful API endpoints:
# List workflow runs
curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \
"https://api.github.com/repos/OWNER/REPO/actions/runs?per_page=10"
# Get workflow run details
curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \
"https://api.github.com/repos/OWNER/REPO/actions/runs/RUN_ID"
# Re-run failed jobs
curl -s -X POST -H "Authorization: Bearer $GITHUB_TOKEN" \
"https://api.github.com/repos/OWNER/REPO/actions/runs/RUN_ID/rerun-failed-jobs"
Pipeline Optimization Checklist
- Cache dependencies (node_modules, .cargo, pip cache)
- Parallelize independent jobs
- Use matrix builds for multi-version testing
- Skip unnecessary steps on non-code changes
- Use shallow clones for faster checkout
- Optimize Docker layer caching
- Run expensive tests only on main branch
Infrastructure Monitoring
Health Check Patterns
HTTP endpoint check:
curl -s -o /dev/null -w "%{http_code} %{time_total}s" --max-time 10 "$URL"
TCP port check:
nc -z -w5 hostname port && echo "UP" || echo "DOWN"
SSL certificate expiry:
echo | openssl s_client -servername HOST -connect HOST:443 2>/dev/null | \
openssl x509 -noout -dates
DNS resolution:
dig +short hostname
Disk usage:
df -h | grep -v tmpfs
Memory usage:
free -h
The Four Golden Signals
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 1,303 lines · 29 tokens per session scan A 7272b7dc73b4
devops-hand-skill is a skill published in the GitHub repository librefang/librefang-registry (11 stars, last pushed 8d ago), licensed MIT. It adds 29 tokens to every session and 10,871 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to devops-hand-skill, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
agent-loop
Production Claude agent loop — Session/Harness/Registry/Tool abstraction, DRYRUN safety guard, APScheduler integration, dead-letter error handling, tool registry, and observability hooks for autonomous agent systems.
aatmf-t10-confidentiality-breach
AATMF T10 — Integrity & Confidentiality Breach. System prompt extraction, training-data extraction, model-weight leakage, private-key recovery.
peekaboo
Capture and automate macOS UI with the Peekaboo CLI.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.
sidewinder-rattlesnake
Adversary-emulation profile for SideWinder (G0121 / Rattlesnake / T-APT-04 / Razor Tiger), India's suspected state-sponsored cyber-espionage actor.
lazarus-group
Adversary-emulation profile for Lazarus Group (G0032, aka Hidden Cobra / Diamond Sleet / Labyrinth Chollima), a North Korean RGB-linked actor conducting espionage, destructive, and financially motivated operations.