技能 ops-engineer
📦
ops-engineer
內容修訂 r2 高風險 ⚙️ 外部命令
Automate Infrastructure and DevOps Operations
Infrastructure work spans many tools, environments, and failure modes. This skill organizes deployment, troubleshooting, automation, monitoring, validation, and documentation into practical workflows.
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "ops-engineer" from https://skillstore.io/skills/zl2023github-ops-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-ops-engineer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「ops-engineer」。 A Linux application server has sustained high load after a release.
預期結果:
- Observation: resource saturation began after the latest deployment.
- Next checks: inspect process usage, application logs, database latency, and deployment changes.
- Proposed action: capture evidence, limit impact, and obtain approval before restarting or rolling back.
正在使用「ops-engineer」。 A Kubernetes workload repeatedly enters CrashLoopBackOff.
預期結果:
- Finding: the container exits because a required database setting is missing.
- Recommendation: correct the secret reference, validate it in staging, and request approval for a rolling deployment.
- Validation: watch readiness, restart counts, events, and logs after the approved change.
安全審計
高風險v4 • 2026/7/23 開啟版本化報告
All 20 static findings are false positives caused by Markdown fences, inline code formatting, Chinese text, or legitimate operational terminology. The file contains readable guidance, not obfuscated content, executable backticks, privilege-escalation commands, or malicious reconnaissance. However, the skill authorizes broad operational execution without mandatory approval and rollback safeguards, creating a high-impact change risk.
1
已掃描檔案
327
分析行數
0
複核項目
0
已忽略的誤報
已確認的安全問題 (1)
高
Operational Changes Lack Confirmation Guardrails
The skill directs the agent to execute commands and infrastructure changes without requiring user confirmation, dry runs, least privilege, or rollback checks. Terraform apply and broad operational execution can modify production systems or cause outages.
The execution workflow and Terraform apply capability are explicit, while no approval gate appears in the 327-line skill.
風險因素
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/zl2023github-ops-engineer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/zl2023github-ops-engineer?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/zl2023github-ops-engineer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zl2023github-ops-engineer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/zl2023github-ops-engineer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
zl2023github. (2026). ops-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-ops-engineer/audits/4BibTeX 引用
@techreport{zl2023github-zl2023github-ops-engineer-2026,
author = {zl2023github},
title = {ops-engineer security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/zl2023github-ops-engineer/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ops-engineer security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "zl2023github"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/zl2023github-ops-engineer/audits/4"
identifiers:
- type: other
value: "skillstore:zl2023github-ops-engineer:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Standardize Service Deployment
Prepare container, proxy, health-check, validation, and delivery steps for a repeatable service deployment.
Investigate Production Incidents
Organize read-only system, network, container, and application checks before proposing a controlled fix.
Build Platform Workflows
Plan Kubernetes resources, CI/CD stages, monitoring, alerts, backups, and operational documentation for an internal platform.
試試這些提示
Plan a Container Deployment
Plan a Docker Compose deployment for [service]. Include dependencies, storage, networking, health checks, secrets handling, validation, and rollback. Do not execute commands.
Diagnose High Server Load
Help diagnose high load on [server type]. Start with read-only checks for CPU, memory, disk, network, and recent changes. Rank likely causes.
Resolve a Kubernetes Failure
Analyze this Kubernetes failure: [symptoms and outputs]. Identify the root cause, propose the smallest change, and define validation. Request approval before changes.
Design a Production Delivery System
Design a delivery system for [application and environment]. Cover infrastructure as code, CI/CD, observability, security, backups, failure recovery, approvals, and phased rollout.
最佳實務
- Provide the environment, scope, symptoms, recent changes, constraints, and desired outcome.
- Begin with read-only diagnostics and use dry runs before applying changes.
- Require explicit approval, backups, validation criteria, and rollback steps for production changes.
避免
- Do not place passwords, tokens, private keys, or unredacted secrets in prompts.
- Do not run unreviewed commands with elevated privileges or against production systems.
- Do not skip backups, staged testing, post-change validation, or operational records.
常見問題
Which operational areas does this skill cover?
It covers infrastructure, containers, Kubernetes, CI/CD, monitoring, troubleshooting, automation, security operations, backups, and disaster recovery.
Can it execute commands in my environment?
A compatible agent may execute commands when tools allow it. Review permissions, scope, and every production change before approval.
Does it support Kubernetes troubleshooting?
Yes. It guides pod inspection, log and event analysis, resource checks, corrective changes, and validation.
Can it create monitoring configurations?
Yes. It can guide Prometheus collection, alert rules, Grafana data sources, dashboards, and logging pipelines.
Does it protect secrets automatically?
No. Users must redact credentials, use approved secret stores, restrict access, and review generated configurations.
What should I provide for incident analysis?
Provide symptoms, timestamps, environment details, sanitized logs, metrics, recent changes, and business impact.
開發者詳細資訊
作者
zl2023github授權
MIT
Skillstore 修訂
r2
版本提示
作者未聲明版本。
儲存庫
https://github.com/zl2023github/software-engineer-skills/tree/main/software-engineering/ops-engineer引用
88a8e9a07f4c54ab105c1c41b6267c287146b07b
維護新鮮度
2026/7/26
使用量
1 次下載 · 1 次瀏覽
檔案結構
📄 SKILL.md