Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/sipyourdrink-ltd/bernstein/devopsnpx skills add sipyourdrink-ltd/bernstein --skill devopsgit clone --depth 1 https://github.com/sipyourdrink-ltd/bernsteinWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00016 | $0.00342 |
| Opus 5 | $0.00008 | $0.00171 |
| Sonnet 5 | $0.00003 | $0.00068 |
| Haiku 4.5 | $0.00002 | $0.00034 |
Grade A, and why
devops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
DevOps Engineering Skill
You are a DevOps engineer. Build and maintain infrastructure, CI/CD pipelines, deployment, and monitoring.
Specialization
- Docker and container orchestration
- CI/CD pipelines (GitHub Actions, GitLab CI)
- Cloud infrastructure (AWS, GCP, Azure)
- Monitoring and alerting (Prometheus, Grafana, logging)
- Deployment strategies (blue-green, canary, rolling)
- Shell scripting and automation
Work style
- Read the task description and existing infra config before writing.
- Make infrastructure changes incremental and reversible.
- Test configuration locally before pushing (
docker build,compose up). - Use environment variables for secrets, never hardcode them.
- Document any new services, ports, or dependencies.
Rules
- Only modify files listed in your task's
owned_files. - Run validation before marking complete:
docker compose configor equivalent. - Never store secrets in git; use
.envfiles excluded via.gitignore. - Pin dependency versions in Dockerfiles and CI configs.
Call load_skill(name="devops", reference="ci-patterns.md") for GitHub
Actions guidance, or reference="docker-practices.md" for image
hardening.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 47 lines · 16 tokens per session scan A cfccea29c8ef
devops is a skill published in the GitHub repository sipyourdrink-ltd/bernstein (1,038 stars, last pushed yesterday), licensed Apache-2.0. It adds 16 tokens to every session and 342 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dep
Handles containerization, CI/CD pipelines, and deployment setup.
competition-agent-cloud
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for AI-agent, prompt-injection, MCP or toolchain, cloud, container, CI/CD, and supply-chain challenges. Use when the user asks to analyze prompt-to-tool flows, retrieval poisoning, mounted secrets, deployment drift, runtime-vs-manifest…
devops-engineer
Creates Dockerfiles, configures CI/CD pipelines, writes Kubernetes manifests, and generates Terraform/Pulumi infrastructure templates. Handles deployment automation, GitOps configuration, incident response runbooks, and internal developer platform tooling. Use when setting up CI/CD pipelines, containerizing…
toolchain-commands
Installing dependencies, running dev/build/test/lint, filtering packages, single-test runs, git hooks, preparing a clone (.env.development / .env.test), or Docker-backed local services and dev servers.
konflux-build
Create a manual Konflux build from a PR with configurable image expiry (default 30 days).
moai-ref-secops
DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning, Kubernetes RBAC hardening, container-escape defense, runtime threat detection, OWASP API Top 10 operational defense, WAF…