infra-scout SKILL.md skillB

infra-scout from hoangminhung/devops-ai-kit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add hoangminhung/devops-ai-kit/infra-scout@git:20261103.8a00cbc

Pins git:20261103.8a00cbc in mdr.lock. Pin the fingerprint instead.

Audit grade
B, 16 of 17 checks passed
Kind
SKILL.md skill
Repository
hoangminhung/devops-ai-kit
Path
claude/skills/infra-scout/SKILL.md
Versions recorded
5
Latest version
git:20261103.8a00cbc, committed Nov 3, 2026
First version recorded
Nov 1, 2026
Size
7,381 bytes
Repository stars
5
License
MIT

Onboard an infrastructure repo — read its Terraform (folders, backends, workspaces, provider versions), Helm charts and values, Argo CD Applications, Ansible inventories and playbooks, manifests and CI, then create or update a short project CLAUDE.md with the Environment registry, stack and versions, repo layout, conventions, common commands and docs settings. Marks each value as found (✅) or inferred (⚠️) and asks the user to confirm the inferred ones. Use once per repo before other work, and…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# /infra-scout — Onboard an infrastructure repo

<!-- devops-ai-kit · Last reviewed: 2026-10-31 -->

Request: $ARGUMENTS

The project's CLAUDE.md is what every later session reads first (`00-core` §9). A short, correct one prevents most "wrong cluster" and "wrong convention" mistakes. This skill writes it from evidence, not from guesses.

## Rules

- **Read-only.** Read files only. Do not run `terraform init`, `helm dependency update` or anything that changes state. Cluster access happens only in step 3, only if the user agrees, and only through `infra-recon`.
- **No secrets.** Never open `*.tfstate*`, `.env*`, private keys or kubeconfig contents. In tfvars and values files, read names and structure, not secret values. Write only the names of secrets and where they are stored.
- **Mark every value**: ✅ found (in the repo or cluster; say where in a few words) or ⚠️ inferred. Unknown → `<to fill in: ...>`.
- **Keep CLAUDE.md under ~100 lines.** Do not repeat what the kit's rules already say (safety rules, Terraform / Helm standards). Write only what is specific to this repo.
- Ask before you write any file.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add hoangminhung/devops-ai-kit/infra-scout@sha256:10e66e5db53a62d3

The line at the top of this page pins the label git:20261103.8a00cbc, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_paxja76s2azvjdkz.svg)](https://markdownregistry.com/a/art_paxja76s2azvjdkz)

0 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Nov 1, 2026 and Nov 3, 2026, more than one a day.

versioncommittedcommitsizeaudit
git:20261103.8a00cbc latest2026-11-03 8a00cbc 7,381 BB view · diff
git:20261103.f9c3aac2026-11-03 f9c3aac 6,892 BB view · diff
git:20261102.b1a95c52026-11-02 b1a95c5 5,375 BB view · diff
git:20261101.b180a5f2026-11-01 b180a5f 4,797 BB view · diff
git:20261101.5414d7c2026-11-01 5414d7c 4,681 BB view

Audit of the latest version

B  16 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No prompt-injection phrasing (matched: ignore previous rules)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (7381 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

hoangminhung/devops-ai-kit · 5 stars · license MIT · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_paxja76s2azvjdkz
GET https://markdownregistry.com/api/v1/resolve?ref=hoangminhung/devops-ai-kit/infra-scout
GET https://markdownregistry.com/api/v1/blob/10e66e5db53a62d38893faa2213cdc75ee615eafd3b21ec97a19c987fc256666

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hoangminhung/devops-ai-kit

cloud-platforms SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/cloud-platforms/SKILL.md · Design standards for cloud and on-prem infrastructure — Azure, AWS, GCP, Hetzner, OVHcloud and bare-metal data centers…
git:20261028.645512f · audit A · 5 stars
container-supply-chain SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/container-supply-chain/SKILL.md · Container and software supply-chain security in CI/CD — vulnerability scanning gates with Trivy or Grype, SBOM…
git:20261028.645512f · audit A · 5 stars
db-reliability SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/db-reliability/SKILL.md · Database reliability engineering standards for PostgreSQL (and MySQL) on Kubernetes — zero-downtime schema changes with…
git:20261028.645512f · audit A · 5 stars
disaster-recovery SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/disaster-recovery/SKILL.md · Backup and disaster-recovery standards — defining RTO/RPO, 3-2-1 and offsite copies, immutable backups (S3 Object Lock…
git:20261028.645512f · audit A · 5 stars
finops SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/finops/SKILL.md · Cloud cost-control standards — cost estimation gates for Terraform changes (Infracost), NAT and data-transfer costs…
git:20261028.645512f · audit A · 5 stars
grill-me SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/grill-me/SKILL.md · Interview the user in short rounds to fill in missing context before acting — goal, scope, target environment…
git:20261028.34f57d4 · audit A · 5 stars
infra-docs SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-docs/SKILL.md · Write infrastructure documentation based on real evidence — change records of what was changed and why…
git:20261101.e2f12a4 · audit A · 5 stars
infra-rulebook SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-rulebook/SKILL.md · Map an infrastructure repo's files to the devops-ai-kit technology rules (Terraform, Ansible, Kubernetes, Helm, Argo…
git:20261031.84caac1 · audit A · 5 stars
infra-task SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/infra-task/SKILL.md · Run a risky infrastructure change end-to-end — recon of the live state, version research, a written plan, independent…
git:20261101.756f384 · audit A · 5 stars
k8s-networking SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-networking/SKILL.md · Kubernetes networking standards — Gateway API versus Ingress, migrating off the retired ingress-nginx controller…
git:20261028.645512f · audit A · 5 stars
k8s-storage SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/k8s-storage/SKILL.md · Kubernetes storage standards — choosing CSI drivers and access modes, StorageClass settings (reclaim policy, binding…
git:20261028.645512f · audit A · 5 stars
pki-secrets SKILL.md skill
hoangminhung/devops-ai-kit · claude/skills/pki-secrets/SKILL.md · Certificate, secret and access-management standards — cert-manager with ACME (HTTP-01/DNS-01) or Vault PKI…
git:20261101.8158acd · audit A · 5 stars

Every file in hoangminhung/devops-ai-kit

Browse by kind, by grade B, or by owner.