容器

浏览 Docker、Kubernetes 和容器编排的 agent skills。大规模管理容器化应用。

sherpa-onnx-tts

openclaw/openclaw

Local text-to-speech via sherpa-onnx (offline, no cloud)

content-hash-cache-pattern

SHA-256コンテンツハッシュを使用して、高コストなファイル処理結果をキャッシュします — パス非依存、自動無効化、サービスレイヤーの分離。

deployment-patterns

Kubernetes、Docker、Vercel、クラウドプロバイダーにおけるデプロイメントパターンと戦略。ブルーグリーン、カナリア、ローリングデプロイメント、ゼロダウンタイムアップグレード。

kubernetes-patterns

Kubernetes workload patterns, resource management, RBAC, probes, autoscaling, ConfigMap/Secret handling, and kubectl debugging for production-grade deployments.

jupyter-notebook

NousResearch/hermes-agent

Iterative Python via live Jupyter kernel (hamelnb).

docker-management

NousResearch/hermes-agent

Manage Docker containers, images, volumes, and Compose.

hermes-s6-container-supervision

NousResearch/hermes-agent

Modify or debug s6 services in the Hermes Docker image.

openclaw-migration

NousResearch/hermes-agent

Import an OpenClaw setup (memories, skills) into Hermes.

nexu-io/open-design

Apple Keynote-quality slides, one card per screen, with keyboard left/right navigation.

earendil-works/pi

[unclosed bracket

earendil-works/pi

A nested skill in a subdirectory.

cost-booster-route

Route tasks through hooks_route, partition by Agent Booster availability, and report Tier 1 bypass utilization with $0 cost

5-dimension harness readiness scorecard from `metaharness score <path>`. Returns harnessFit / compileConfidence / taskCoverage / toolSafety / memoryUsefulness + estCostPerRunUsd + scaffoldReady. Pure-read; subprocess invocation; degrades gracefully when MetaHarness is absent (ADR-150 architectural constraint).

Generate embeddings via npx ruvector@0.2.25 embed text (ONNX all-MiniLM-L6-v2, 384-dim), normalize, and store in HNSW index

gaia-architecture-comparison

Side-by-side comparison of ruflo vs HAL vs other GAIA harnesses — capability gaps, design decisions, and improvement roadmap

deprecated-shim

bmad-code-org/BMAD-METHOD

DEPRECATED — consolidated into bmad-foo; this skill will be removed in v7 in favor of `bmad-foo`.

Hmbown/CodeWhale

Compatibility alias for the pptx skill. Prefer loading pptx.

Hmbown/CodeWhale

Compatibility alias for the xlsx skill. Prefer loading xlsx.

turborepo-caching

wshobson/agents

Configure Turborepo for efficient monorepo builds with local and remote caching. Use when setting up Turborepo, optimizing build pipelines, or implementing distributed caching.

helm-chart-scaffolding

wshobson/agents

Design, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable configurations. Use when creating Helm charts, packaging Kubernetes applications, or implementing templated deployments.

k8s-manifest-generator

wshobson/agents

Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.

k8s-security-policies

wshobson/agents

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.

Yeachan-Heo/oh-my-claudecode

Configure HUD display options (layout, presets, display elements)

qdrant-scaling-query-volume

github/awesome-copilot

Guides Qdrant query volume scaling. Use when someone asks 'query returns too many results', 'scroll performance', 'large limit values', 'paginating search results', 'fetching many vectors', or 'high cardinality results'.

qdrant-version-upgrade

github/awesome-copilot

Guidance on how to upgrade your Qdrant version without interrupting the availability of your application and ensuring data integrity.

Yeachan-Heo/oh-my-codex

Show or configure the OMX HUD (two-layer statusline)

davila7/claude-code-templates

Docker containerization expert with deep knowledge of multi-stage builds, image optimization, container security, Docker Compose orchestration, and production deployment patterns. Use PROACTIVELY for Dockerfile optimization, container issues, image size problems, security hardening, networking, and orchestration challenges.

davila7/claude-code-templates

Plans, creates, and configures production-ready Google Kubernetes Engine (GKE) clusters using the golden path Autopilot configuration. Covers networking, security, observability, scaling, cost optimization, and AI/ML inference on GKE.

helm-chart-scaffolding

davila7/claude-code-templates

Comprehensive guidance for creating, organizing, and managing Helm charts for packaging and deploying Kubernetes applications.

simstudioai/sim

Install, upgrade, and operate the Sim Helm chart on Kubernetes. Covers install path selection (inline / existingSecret / External Secrets Operator), required secret generation, the values.yaml mental model (env vs envDefaults vs Secret), and common failure triage. Invoke when a user asks about deploying Sim to a cluster, authoring a Sim values.yaml, debugging a Sim pod that won't start, upgrading a Sim release, or wiring Sim into a secret manager.

create-table-hook

Create a reusable Lit useAppTable/createAppColumnHelper layer with host-backed controllers, shared features/defaults, typed cell/header renderers, App wrappers, and useTableContext for custom-element controls. Load when multiple Lit tables share infrastructure or prop drilling obscures table context.

configuring-hsm-for-key-storage

mukul975/Anthropic-Cybersecurity-Skills

Hardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cryptographic operations in a hardened environment. Keys stored in an HSM never lea

configuring-microsegmentation-for-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Configure microsegmentation policies to enforce least-privilege workload-to-workload access using tools like VMware NSX, Illumio, and Calico, preventing lateral movement in zero trust architectures.

detecting-container-runtime-threats-with-falco

mukul975/Anthropic-Cybersecurity-Skills

Write and deploy Falco rules with the modern eBPF driver to detect container escape, namespace abuse, privileged mounts, and anomalous syscalls at runtime in Kubernetes and Docker.

detecting-privilege-escalation-in-kubernetes-pods

mukul975/Anthropic-Cybersecurity-Skills

Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.

implementing-container-network-policies-with-calico

mukul975/Anthropic-Cybersecurity-Skills

Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.

implementing-envelope-encryption-with-aws-kms

mukul975/Anthropic-Cybersecurity-Skills

Envelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS. This approach allows encrypting

implementing-kubernetes-network-policy-with-calico

mukul975/Anthropic-Cybersecurity-Skills

Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.

implementing-kubernetes-pod-security-standards

mukul975/Anthropic-Cybersecurity-Skills

Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS

implementing-network-policies-for-kubernetes

mukul975/Anthropic-Cybersecurity-Skills

Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints. Combined with CNI plu

implementing-opa-gatekeeper-for-policy-enforcement

mukul975/Anthropic-Cybersecurity-Skills

Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.

implementing-pod-security-admission-controller

mukul975/Anthropic-Cybersecurity-Skills

Implement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.

implementing-policy-as-code-with-open-policy-agent

mukul975/Anthropic-Cybersecurity-Skills

This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines. It addresses writing Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, testing policies in development, and integrating policy evaluation into deployment pipelines.

implementing-secrets-management-with-vault

mukul975/Anthropic-Cybersecurity-Skills

This skill covers deploying HashiCorp Vault for centralized secrets management across cloud environments, including dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration. It addresses eliminating hardcoded credentials from application code and CI/CD pipelines by implementing short-lived, automatically rotated secrets.

migrating-to-post-quantum-cryptography

mukul975/Anthropic-Cybersecurity-Skills

Inventory cryptography, deploy hybrid X25519 and ML-KEM, and prioritize harvest-now-decrypt-later data.

performing-container-image-hardening

mukul975/Anthropic-Cybersecurity-Skills

This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.

performing-kubernetes-cis-benchmark-with-kube-bench

mukul975/Anthropic-Cybersecurity-Skills

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

scanning-kubernetes-manifests-with-kubesec

mukul975/Anthropic-Cybersecurity-Skills

Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.