infra-rulebook SKILL.md skillA

infra-rulebook from hoangminhung/devops-ai-kit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add hoangminhung/devops-ai-kit/infra-rulebook@git:20261031.84caac1

Pins git:20261031.84caac1 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
hoangminhung/devops-ai-kit
Path
claude/skills/infra-rulebook/SKILL.md
Versions recorded
1
Latest version
git:20261031.84caac1, committed Oct 31, 2026
Size
3,861 bytes
Repository stars
5
License
MIT

Map an infrastructure repo's files to the devops-ai-kit technology rules (Terraform, Ansible, Kubernetes, Helm, Argo CD, Dockerfile, observability), report which files the kit's default paths already cover, and create small project-level rule files that add the missing paths and point to the kit rule. Never copies the standards. Use after /infra-scout when onboarding a repo, or when infrastructure files live in folders the kit does not match (e.g. manifests in deploy/).

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# /infra-rulebook — Make the kit's rules load for every infrastructure file

<!-- devops-ai-kit · Last reviewed: 2026-10-31 -->

Request: $ARGUMENTS

The kit's technology rules load only for files that match their `paths` (e.g. `**/k8s/**`). Many repos keep files in other folders (`deploy/`, `chart/`, `apps/*/app.yaml`), so Claude edits them without the standards. This skill finds those files and adds the missing paths at project level.

## Rules

- **The kit is the only source of the standards.** A project rule file contains `paths` and a pointer to the kit rule, nothing else. Never copy standards into the repo.
- **No `@import` to the kit.** Claude Code does not load imports of files outside the project (checked with Claude Code 2.1.x), so the file uses a "read this rule file" line instead.
- Write only under `<repo>/.claude/rules/`. Never edit the kit's own rule files.
- Ask before you write or change any file.

## Steps

1. **Find the repo and the kit.**
   - Repo root: the argument, or `git rev-parse --show-toplevel`.
   - Kit rules: `${CLAUDE_CONFIG_DIR:-~/.claude}/rules/devops-kit/`. If it is missing, stop and tell the user to install the kit.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hoangminhung/devops-ai-kit/infra-rulebook@sha256:3bf16244a90f1698

The line at the top of this page pins the label git:20261031.84caac1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_os5gkhop55xgcxxz.svg)](https://markdownregistry.com/a/art_os5gkhop55xgcxxz)

0 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 31, 2026.

versioncommittedcommitsizeaudit
git:20261031.84caac1 latest2026-10-31 84caac1 3,861 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3861 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

hoangminhung/devops-ai-kit · 5 stars · license MIT · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_os5gkhop55xgcxxz
GET https://markdownregistry.com/api/v1/resolve?ref=hoangminhung/devops-ai-kit/infra-rulebook
GET https://markdownregistry.com/api/v1/blob/3bf16244a90f1698701a355ff656976ac002b13fb50449bb310b808dd67e2ec5

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hoangminhung/devops-ai-kit

cloud-platforms SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/cloud-platforms/SKILL.md · Design standards for cloud and on-prem infrastructure — Azure, AWS, GCP, Hetzner, OVHcloud and bare-metal data centers…
git:20261028.645512f · audit A · 5 stars
container-supply-chain SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/container-supply-chain/SKILL.md · Container and software supply-chain security in CI/CD — vulnerability scanning gates with Trivy or Grype, SBOM…
git:20261028.645512f · audit A · 5 stars
db-reliability SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/db-reliability/SKILL.md · Database reliability engineering standards for PostgreSQL (and MySQL) on Kubernetes — zero-downtime schema changes with…
git:20261028.645512f · audit A · 5 stars
disaster-recovery SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/disaster-recovery/SKILL.md · Backup and disaster-recovery standards — defining RTO/RPO, 3-2-1 and offsite copies, immutable backups (S3 Object Lock…
git:20261028.645512f · audit A · 5 stars
finops SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/finops/SKILL.md · Cloud cost-control standards — cost estimation gates for Terraform changes (Infracost), NAT and data-transfer costs…
git:20261028.645512f · audit A · 5 stars
grill-me SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/grill-me/SKILL.md · Interview the user in short rounds to fill in missing context before acting — goal, scope, target environment…
git:20261028.34f57d4 · audit A · 5 stars
infra-docs SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-docs/SKILL.md · Write infrastructure documentation based on real evidence — change records of what was changed and why…
git:20261101.e2f12a4 · audit A · 5 stars
infra-scout SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-scout/SKILL.md · Onboard an infrastructure repo — read its Terraform (folders, backends, workspaces, provider versions), Helm charts and…
git:20261103.8a00cbc · audit B · 5 stars
infra-task SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-task/SKILL.md · Run a risky infrastructure change end-to-end — recon of the live state, version research, a written plan, independent…
git:20261101.756f384 · audit A · 5 stars
k8s-networking SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-networking/SKILL.md · Kubernetes networking standards — Gateway API versus Ingress, migrating off the retired ingress-nginx controller…
git:20261028.645512f · audit A · 5 stars
k8s-storage SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-storage/SKILL.md · Kubernetes storage standards — choosing CSI drivers and access modes, StorageClass settings (reclaim policy, binding…
git:20261028.645512f · audit A · 5 stars
pki-secrets SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/pki-secrets/SKILL.md · Certificate, secret and access-management standards — cert-manager with ACME (HTTP-01/DNS-01) or Vault PKI…
git:20261101.8158acd · audit A · 5 stars

Every file in hoangminhung/devops-ai-kit

Browse by kind, by grade A, or by owner.