gitops-cicd SKILL.md skillA
gitops-cicd from controlplane-com/ai-plugin is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add controlplane-com/ai-plugin/gitops-cicd@git:20260930.5bf3cc6Pins git:20260930.5bf3cc6 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- controlplane-com/ai-plugin
- Path
plugins/cpln/skills/gitops-cicd/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260930.5bf3cc6, committed Sep 30, 2026
- First version recorded
- Jun 12, 2026
- Size
- 10,910 bytes
- Repository stars
- 11
- License
- MIT
Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# GitOps & CI/CD In pipelines the **CLI is the primary interface**: authenticate with a service-account key in `CPLN_TOKEN` (no profile needed), push an image, `cpln apply --ready` the manifests. MCP tools do the work around the pipeline — `mcp__cpln__get_resource_schema` before authoring manifests, `mcp__cpln__list_deployments` to confirm a deploy landed. The usual failure is image builds: `cpln image build` runs the build **locally through Docker**, so a runner without a daemon needs a different flow — a daemonless builder, or `--remote` to build on Control Plane. Pick by runner capability, not by habit. ## Service-account authentication ```bash cpln serviceaccount create --name ci-deployer --org ORG cpln serviceaccount add-key ci-deployer --description "ci key" --org ORG # --description is required ``` The JSON response's `key` value is the credential — keep it on the user's machine and store it as a masked/secret variable in the CI platform; never paste it into chat. MCP: `mcp__cpln__add_key_to_service_account` (full profile) creates the service account if it is missing and returns a Console link where the user creates the key privately. …
Read the whole file at its exact version.
How to install
mdr add controlplane-com/ai-plugin/gitops-cicd@sha256:85b61f44f3a1f55fThe line at the top of this page pins the label git:20260930.5bf3cc6, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kevrwuuis5pq7byd)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jun 12, 2026 and Sep 30, 2026, about one every 28 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260930.5bf3cc6 latest | 2026-09-30 | 5bf3cc6 | 10,910 B | A | view · diff |
| git:20260925.7bf99b8 | 2026-09-25 | 7bf99b8 | 10,798 B | A | view · diff |
| git:20260730.6e2703a | 2026-07-30 | 6e2703a | 12,619 B | A | view · diff |
| git:20260728.f891330 | 2026-07-28 | f891330 | 12,594 B | A | view · diff |
| git:20260612.b890dfa | 2026-06-12 | b890dfa | 11,356 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10910 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
controlplane-com/ai-plugin · 11 stars · license MIT · pushed 2026-10-14 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_kevrwuuis5pq7byd GET https://markdownregistry.com/api/v1/resolve?ref=controlplane-com/ai-plugin/gitops-cicd GET https://markdownregistry.com/api/v1/blob/85b61f44f3a1f55f16ba5a69801d4b934fe40f1c48c7773e6a7373853e50f854
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.