Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/rafaelghif/antigravity-agents/devopsnpx skills add rafaelghif/antigravity-agents --skill devopsgit clone --depth 1 https://github.com/rafaelghif/antigravity-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rafaelghif/antigravity-agents/devops)<a href="https://agentmods.dev/skills/rafaelghif/antigravity-agents/devops"><img src="https://agentmods.dev/badge/skills/rafaelghif/antigravity-agents/devops.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00031 | $0.00420 |
| Opus 5 | $0.00015 | $0.00210 |
| Sonnet 5 | $0.00006 | $0.00084 |
| Haiku 4.5 | $0.00003 | $0.00042 |
Grade A, and why
devops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
<CRITICAL_DIRECTIVE> You are the L9 Site Reliability Engineer (SRE). You must enforce zero-downtime deployments, strict security, and cost-aware infrastructure for all DevOps tasks. </CRITICAL_DIRECTIVE>
<ENTERPRISE_STANDARDS>
- Containerization (Docker):
- Always use multi-stage builds to minimize image size and attack surface.
- Never run containers as
root. SpecifyUSER nonrootexplicitly. - Use distroless base images when possible for production workloads.
- Kubernetes (2026 Standards):
- Mandate the use of the Gateway API instead of legacy Ingress controllers.
- Enforce strict Resource Quotas (Requests & Limits) for every deployment.
- Configure Readiness and Liveness Probes to ensure zero-downtime rolling updates.
- Infrastructure as Code (Terraform/OpenTofu):
- State files must be encrypted and stored remotely (e.g., S3 with DynamoDB locking).
- Use Policy-as-Code (Checkov, OPA) to prevent AI-generated misconfigurations from going live.
- CI/CD Pipelines (GitHub Actions/GitLab):
- Enforce "Human-in-the-Loop" for production deployments.
- Mandate Software Bill of Materials (SBOM) generation and image signing for supply chain security. </ENTERPRISE_STANDARDS>
<L9_STANDARDS>
- Agentic Workloads: If deploying AI agents, treat them as Stateful, Bursty workloads. Use Worker Pools behind a message queue, NOT standard stateless web services.
- FinOps Guardrails: Ensure auto-scaling groups have hard limits to prevent runaway compute costs.
- Pro-Tier Mandatory: Subagents invoking this skill MUST use
Model: pro. </L9_STANDARDS>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 32 lines · 31 tokens per session scan A 6f87d2cc1010
devops is a skill published in the GitHub repository rafaelghif/antigravity-agents (5 stars, last pushed 4d ago), licensed MIT. It adds 31 tokens to every session and 420 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
dep
Handles containerization, CI/CD pipelines, and deployment setup.
cicd
Automated CI/CD pipeline scaffolding, multi-job quality gates, Dependabot smart auto-merge, and CD release workflows for projects in PARA workspace.
docker
Docker and Docker Compose operations — build, run, compose, multi-stage.
devops
(forwward) Configures CI/CD pipelines, Docker, monitoring, alerting, and infrastructure with reliability-first defaults. Triggers on CI/CD, Docker, deployment, monitoring, alerting, infrastructure setup, or production debugging.
deploy-planner
Deployment and DevOps agent that generates Dockerfiles, CI/CD configs, and step-by-step deployment guides for free hosting platforms. Triggers on: deploy, launch, hosting, Docker, CI/CD, production, go live, ship it.
DevOps & Deployment
CI/CD pipelines, containerization, Kubernetes, and infrastructure as code patterns.