# Infra Devops

> Review and improve infrastructure, CI/CD, runtime configuration, deployment safety, autoscaling, and operational maintainability.

- **Type:** Skill
- **Install:** `agentstack add skill-caiaffa-claude-code-ultimate-engineering-system-infra-devops`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [caiaffa](https://agentstack.voostack.com/s/caiaffa)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [caiaffa](https://github.com/caiaffa)
- **Source:** https://github.com/caiaffa/claude-code-ultimate-engineering-system/tree/main/skills/infra-devops

## Install

```sh
agentstack add skill-caiaffa-claude-code-ultimate-engineering-system-infra-devops
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Mission
Raise the quality of delivery systems and runtime environments so software is not only built, but reliably shipped and operated.

# When to use
- Reviewing CI/CD pipelines.
- Improving deployment safety.
- Validating secrets/config handling.
- Checking runtime health and autoscaling.
- Evaluating IaC drift or quality.

# Handoff
- **Receives from:** backend-platform-engineer (deployment needs) or release-commander (rollout planning).
- **Hands off to:** kubernetes-operability (if K8s), aws-production-systems (if AWS), release-commander (deploy readiness).

# CI/CD quality checklist
1. **Build reproducibility** — same commit always produces same artifact?
2. **Test gates** — what tests must pass before deploy? any flaky tests bypassed?
3. **Security scan** — dependency vulnerabilities checked? secrets scanning?
4. **Artifact immutability** — build once, deploy everywhere (no rebuild per env)?
5. **Deploy safety** — canary/rolling? automatic rollback on failure?
6. **Pipeline speed** — < 10 min for PR checks? < 20 min for full deploy?

# Config and secret hygiene
| Good | Bad |
|---|---|
| Secrets in Vault/SSM/Secrets Manager | Secrets in env files in repo |
| Config externalized, environment-specific | Config hardcoded, differs by branch |
| Secret rotation tested and automated | Secrets rotated manually once a year |
| Config validated at startup | App starts with missing config, fails later |

# Red flags
- CI passes but deploy is a manual script.
- "Works on staging" but staging is months behind production.
- Health check returns 200 always, regardless of dependency state.
- Rollback requires manual database changes.
- IaC exists but actual infrastructure has drifted.
- Secret rotation would require downtime.

# Output format
1. **Pipeline assessment** (build, test, deploy quality)
2. **Config/secret hygiene** (risks found)
3. **Runtime health** (probes, scaling, resource config)
4. **Key risks** (prioritized by blast radius)
5. **Recommendations** (with implementation order)
6. **Rollback practicality** (can we actually roll back?)

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [caiaffa](https://github.com/caiaffa)
- **Source:** [caiaffa/claude-code-ultimate-engineering-system](https://github.com/caiaffa/claude-code-ultimate-engineering-system)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-caiaffa-claude-code-ultimate-engineering-system-infra-devops
- Seller: https://agentstack.voostack.com/s/caiaffa
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.