Cloud Infrastructure for AI agents
100 security-reviewed cloud infrastructure listings, skills, MCP servers, and toolkits you can install into Claude Code, Cursor, and other agents with one command.
Kaimahi
Agent Builder CLI for Kubernetes.
Cursor Kit For Ai
Production-ready templates for Cursor AI — DevOps, Backend, Automation. One CLI command, full stack in 20 seconds.
Docker Sandboxes Env
Use this skill when authoring, planning, or running a declarative `sbxenv.yaml` file for Docker Sandboxes (`sbx env create/run/plan/exec/rm`), even if the user just says they want to "check in a sandbox config", "make onboarding reproducible for a sandbox", "run a setup script before the agent starts", or "define arguments for a shared sandbox environment". Covers the sbxenv.yaml schema (schemaVe…
Docker Destructive Guardrails
Use this skill before running, or recommending, any Docker command that deletes, wipes, resets, or otherwise irreversibly changes state — even if the user just says to "clean up", "clear the cache", "start fresh", "wipe everything", "nuke it", "reset", "force remove", or "tear down" Docker resources. Covers generic Docker CLI destructive operations not owned by a more specific skill — `docker rm`…
Docker Agent Run
Use this skill when running a Docker Agent with `docker agent run`, choosing a safety/approval mode, using the `--sandbox` isolation flag, setting up aliases, or troubleshooting a run (missing credentials, worktrees). Even if the user just says they want to "run my agent", "make my agent auto-approve tool calls", "run this agent safely", or "why can't my agent see my API key", this skill applies.…
Docker Sandboxes Lifecycle
Use this skill when creating, running, reattaching to, listing, stopping, or removing Docker Sandboxes (the standalone `sbx` CLI that runs AI coding agents in isolated microVMs), even if the user just says they want to "run claude in a sandbox", "isolate an agent from my repo", "give an agent its own git clone", or "clean up old sandboxes". Covers `sbx run`/`sbx create` (including the built-in ag…
Docker Sandboxes Network Credentials
Use this skill when configuring what a Docker Sandboxes (`sbx`) sandbox can reach on the network or which credentials it authenticates with, even if the user just says they want to "let the agent call an internal API", "block all network access", "give the agent a GitHub token", or "use a private registry image for a sandbox". Covers `sbx policy init/allow/deny/ls/inspect/log/check/rm network` (g…
Docker Agent Deploy
Use this skill when exposing a Docker Agent as a server (MCP, HTTP API, A2A, ACP, or OpenAI-compatible chat), distributing an agent via an OCI registry with `docker agent share`, or measuring agent quality with `docker agent eval`. Even if the user just says they want to "turn my agent into an MCP server", "let Claude Desktop use my agent", "publish my agent to Docker Hub", "push my agent like an…
Docker Sandboxes Kits
>-
Docker Agent Config
Use this skill when creating or editing an agent.yaml (or .yml/.hcl) configuration file for Docker Agent (cagent), including defining agents, models/providers, built-in or MCP toolsets, multi-agent teams with sub_agents. Even if the user just says they want to "build an AI agent with Docker", "make a coding agent config", "add a tool to my agent", or "set up a team of agents", this skill applies.…
Sagemaker Ai
Build, train, deploy, monitor, or troubleshoot workloads on Amazon SageMaker AI. Use for SageMaker Python SDK v3, model training and customization, inference, HyperPod, Model Monitor, AutoGluon, Pipelines, or iterative training with managed warm pools.
Lazydocker
lazydocker - Docker 和 Docker Compose 的终端 UI 管理工具
Dependency Pinning
Audit Docker, CI, and language dependencies for SHA/digest pinning and cooldowns.
Ls Cloudflare Dns
Use the cf CLI for Cloudflare zones, DNS records, settings, DNSSEC, scans, imports, exports, batches, analytics, and zone transfers.
Ls Linux Patcher
Create safe Linux server patching and Docker update plans. Use when the user asks to update, patch, or upgrade Linux servers, check maintenance readiness, plan package updates, plan Docker Compose refreshes, or coordinate multi-host maintenance. The bundled helper is plan-only; PatchMon API execution is unavailable until a tested Python client is added.
Ls Garage
Operate the documented Garage v2.3.0 Admin API allowlist and S3 subset through an offline-first, JSON-only CLI.
Ls Docker Best Practices
Guide Dockerfile, Compose, and container best practices. Use for images,
Ls Backblaze
Safely plan and execute Backblaze B2 S3-compatible storage operations and B2 native bucket, key, and notification administration.
Tandry
A shared room for your agent conversations. Connect Claude Code, Codex, OpenCode and more across tools and machines.
Docker
Run and inspect Docker containers, Compose services, and Colima on macOS.
Aws
Operate AWS accounts, resources, and SSO profiles with aws and aws-sso-util.
Crowdsec
Use when the user is installing, configuring, operating, or debugging CrowdSec — including cscli, LAPI/CAPI, hub collections, parsers/scenarios/whitelists deployment, bouncers (firewall, nginx, traefik, caddy), WAF (AppSec component) deployment, bot detection / AppSec challenge mode (blocking headless browsers and scrapers, allowing verified crawlers), profiles, notifications, upgrades, and fail2…
Crowdsec Service Api
Use when the user wants to drive the CrowdSec Console **Service API (SAPI)** — the premium cloud REST API at admin.api.crowdsec.net — to programmatically manage blocklists (add/remove/bulk IPs, share, subscribe engines), allowlists, firewall/appliance integrations (Palo Alto, Fortinet, Cisco, F5, Sophos, pfSense/OPNsense…), remediation ROI metrics, and org-level decisions. Acts on the user's beha…
Kb Strands Agentcore
Strands Agents フレームワークのナレッジ。Agent作成、ツール定義、イベント処理、会話履歴管理等（CDKは /kb-agentcore-cdk、Observabilityは /kb-agentcore-observability、Identity認証は /kb-agentcore-identity）
Kb Agentcore Observability
AgentCore の Observability ナレッジ。OpenTelemetry 必須4点セット（OTEL_EXPORTER設定・StrandsTelemetry・traceable デコレータ・Langfuse連携）、EMF メトリクス、Jaeger/コンソールエクスポーターでのトレース確認、トレースが出ない・繋がらない場合のデバッグ手順等
Kb Agentcore Cdk
AgentCore CDK・デプロイ・ランタイム統合のナレッジ。Runtime作成、JWT認証、SSE、Dockerfile、コンテナ管理、Browser Tool等
Kb Agentcore Identity
AgentCore Identity（アウトバウンド認証）のナレッジ。3LO/M2M/デコレータ分離/callback等
Kb Lambda Web Adapter Cdk
AIエージェントのWebアプリを「AWS CDK（デプロイはCDKD）＋ Lambda Web Adapter ＋ CloudFront ＋ AgentCore Runtime」で組むときの全体構成。スタックの分け方、画面を配信するLambdaコンテナのDockerfileと配信サーバー、Function URL を CloudFront の OAC で守る設定と追加で要る権限、runtime-config.json で環境値を渡す型、フロントから AgentCore を直接呼ぶ配線、ローカル開発、デプロイ前後の検証。新しくエージェントのWebアプリを作るとき、Amplify Hosting 以外の配信基盤を選ぶとき、CloudFront 経由の Function URL が 403 になるときに読む。
Kb Demo App Auth
デモアプリ・Webアプリの Cognito 認証のおすすめ構成。「Googleで続ける」か「メール＋パスキー（パスワードも併用可）」の2経路をCDKとフロントでどう組むか、パスキーが動かない設定の罠、Google client secret の置き場、ログイン画面のUX規約、Googleの同意画面に出るアプリ名の扱い。新しくデモアプリを作るとき、既存アプリの認証を作り直すとき、パスキーやGoogleログインが動かないときに読む。
Cdkd Deploy
Deploy, diff, bootstrap, inspect, roll back, or destroy AWS CDK applications with the community CDKD CLI while preserving safe production and state-management boundaries. Use when the user mentions cdkd or CDK Direct, asks for faster CDK deployments in development or test environments, or wants to evaluate whether an existing CDK app can use CDKD. Also use for CDKD import, export, state, events,…
Kb Frontend Sse
SSEストリーミング処理のナレッジ。基本パターン/タイムアウト/リトライ/モック/PDF生成等
Ci Cd
Design the shape of a delivery pipeline — what each stage actually proves, what gates what, where verification belongs, and how a run reports the truth instead of a green tick. Use when a pipeline is being designed or restructured, when a release got through a passing pipeline broken, when deciding what blocks a merge or a deploy, or when a stage claims more than it ran. Not for provider-specific…
Github Actions
Write and review GitHub Actions workflows that fail honestly and finish fast enough to be trusted — least-privilege permissions, untrusted pull request input, caching keyed on the right thing, matrices that mean something, and secrets that never reach a fork. Use when adding or changing a workflow file, when CI is slow, flaky, or green when it should be red, or when reviewing someone's workflow Y…
Docker
Build container images that are reproducible, small, and safe to run — layer order and what actually caches, multi-stage builds, and what belongs in an image versus what must never be baked into one. Use when writing or reviewing a Dockerfile, when an image build is slow, bloated, or non-deterministic, or when deciding how configuration and secrets reach a container. Not for orchestration, cluste…
Agent Browser
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to…
Wazuh Cloud Container
Interpret Wazuh cloud and container alerts — AWS (CloudTrail, GuardDuty, VPC Flow, Security Hub), Azure, GCP, Microsoft Graph, Office 365, GitHub and Docker — with their key fields, normal baselines and pivots; use for any alert from a cloud or container integration.
Everything Search
Search files and folders instantly across Windows drives or within specific project paths using Everything (HTTP REST API or es.exe CLI). Supports sandboxed agents (Docker, WSL, DevContainers) and native desktop environments with automatic dual-mode fallback.
Cloudflare
Read Cloudflare zones and DNS records: list zones, list DNS records for a zone. Trigger phrases: cloudflare, dns records, cloudflare zone.
LibreChat
Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, langchain, DALL-E-3, OpenAPI Actions, Functions, Secure Multi-User Auth, Presets, open-source for self-hosting. Active
Backstage Platform Template
A production-ready Internal Developer Platform in a single git clone — Backstage, ArgoCD, Crossplane, EKS, 63 golden-path templates. Running locally in 30 minutes.
Browser Bridge
Stealth headless Chromium on your own CDP endpoint, with a prompt-injection firewall between the agent and the web.
Portunix
Unified AI plugin and task platform for development environments. Cross-platform CLI with containers, VMs, plugins, MCP, and automated installs.
Three Failures
A runnable Docker Compose lab demonstrating the three structural failures of observe-and-detect agent governance. No API keys, no cloud accounts, 60 seconds to run.
Classifier Dev
Zero-shot text classification over plain HTTP — no API key, no account. One Cloudflare Worker, a CLI, and an MCP server. https://classifier.dev
Artifact Site
A self-hosted home for your team’s AI-generated pages and documents. Publish HTML, build folders, ZIPs and PDFs as sandboxed, versioned links. CLI + remote MCP for AI agents.
Dify Dsl Pipe
🌊 dify dsl导出、导入与跨实例迁移工具，支持增量备份、定时任务、多存储后端（本地 / Git / S3 / OSS / COS 等）以及 MCP Server 集成。Node.js 编写，无需安装，通过 npx 直接使用。
Sysadmin Diagnose
Diagnose a failing service or system issue on a Debian/Ubuntu Linux machine with a hypothesis-driven loop that gathers evidence from journalctl and systemctl, finds patterns, tests a hypothesis, fixes, and verifies. Use when something is broken and you need root cause, not a guess.
Sysadmin Security
Security audit and hardening for Debian/Ubuntu Linux systems covering user access, SSH, firewall, ports, file permissions, updates, and backups. Explains each change's benefit and lock-out risk before applying. Use when auditing or hardening a server or workstation.
Sysadmin Performance
Analyze and optimize performance on a Debian/Ubuntu Linux system by assessing CPU, memory, disk, network, and processes, finding the bottleneck, then applying targeted tuning with before-and-after measurement. Use when a machine is slow and you need to find why.
Sysadmin Monitor
Read-only health sweep of a Debian/Ubuntu Linux machine covering CPU, memory, disk, network, processes, critical services, temperatures, and recent log errors, ending in a summary that flags concerns. Use for an on-demand snapshot of system health.
Sysadmin Maintain
Routine maintenance pass on a Debian/Ubuntu Linux machine that updates and upgrades packages, autoremoves, cleans cache, scans logs, checks disk and services, and verifies backups. Asks before destructive steps. Use for regular upkeep.
Dreamteam
Use when a multi-step task or an approved plan should be driven to a verified, independently-reviewed result by orchestrating specialist agents across domains (software builds, ML/CV research, devops, QA) — when one task needs several specialists, when you want review gates between steps instead of one unreviewed dump, or when you have a plan to execute with quality checkpoints.
Pretext Pdf
Generate PDFs from JSON — declarative, serverless, no Chromium. TypeScript-first with professional typography.
Codeman
>-
Wet
Open-source MCP server for AI agents: web search, content extraction, and library docs -- 5-strategy scraping, runs without API keys.
Crg
Knowledge graph for token-efficient code reviews -- semantic search and call-graph resolution across your codebase.
Logcli
Query Loki logs using local logcli when available, with grafana/logcli Docker fallback. Use when you need to search logs, list labels, or inspect log series from a Grafana Loki instance.
AKS Skills
Agent skills for operating Azure Kubernetes Service (AKS): troubleshooting, cost, AKS Automatic readiness, GPU/inference, packet capture, and cluster design. The deep Day-2 AKS operator — complements the Azure Skills plugin; works with Claude Code, GitHub Copilot, and Azure SRE Agent.
Genesys Mcp
Your Genesys Cloud org, in your AI's hands. Open-source MCP server on Cloudflare Workers. It builds, not just reads.
Five9 Mcp
Zero-dependency MCP server that puts your Five9 domain in your AI's hands. 73 tools for campaigns, users, skills, lists, dispositions, and IVRs. Works with Claude and ChatGPT, one-click deploy to Cloudflare Workers.
Traks
Self-hosted, privacy-friendly web analytics that deploys into your own Cloudflare account in two minutes. Free forever, MIT.
Cloudflare Deploy
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.
Github Actions Creator
Use when the user wants to create, generate, or set up a GitHub Actions workflow. Handles CI/CD pipelines, testing, deployment, linting, security scanning, release automation, Docker builds, scheduled tasks, and any custom workflow for any language or framework.
Harness Context
|
Escalate
|
Worktrees
|
Retro
|
Fanout
|
Delegate
|
Skill
A Claude skill from mifunedev/agro.
Wiki
|
Eval
>-
T3
|
Prd
Generate a Product Requirements Document (PRD) for a new feature. Use when planning a feature, starting a new project, or when asked to create a PRD. Triggers on: create a prd, write prd for, plan this feature, requirements for, spec out.
Post Bridge
|
Release
|
References
A Claude skill from mifunedev/agro.
Prompt Miner
|
Imagine
|
Cloudflared
|
Builder
|
Interview
|
Strategic Proposal
|
Weigh
|
Sync
|
Herdr
|
Plan
|
Git
|
Rlm
|
Health Check
|
Ci Status
|
Audit
>-
Ralph
Convert PRDs to prd.json format for the Ralph autonomous agent system. Use when you have an existing PRD and need to convert it to Ralph's JSON format. Triggers on: convert this prd, turn this into ralph format, create prd.json from this, ralph json.
Render Html
|
Blog
|
Benchmark
>-
Ste
|
Agent Browser
|
Architect
|
Fuzz
Adaptive, targeted web fuzzing - deterministic wordlist selection (wl-pick.sh) plus judgment. Picks the right SecLists list per surface (content/vhost/api/params/artifacts) smallest-first, calibrates filters against soft-404s, recurses, escalates T0 harness -> T1 seclists -> T2 cewl -> T3 app-specific on signal, pivots to hidden-param fuzzing, and detects/handles WAF/Cloudflare/throttle (backoff,…