Best AI Skills for DevOps and CI/CD [2026]
Top 5 DevOps CI/CD skills from our scored review — Docker security playbooks, Argo Rollouts canary configs, and a production-ready blue-green script.
Articles about AI skill security, coding tool tips, and best practices.
Top 5 DevOps CI/CD skills from our scored review — Docker security playbooks, Argo Rollouts canary configs, and a production-ready blue-green script.
Top 5 AI/ML development skills from our scored review — RAG architectures, prompt engineering patterns, LLM debugging frameworks, and production guidance.
We installed and scored 15 CSS and design skills. These 5 stood out — from fluid typography cookbooks to a 99-rule UX checklist with a built-in CLI.
We installed and scored 10 data analysis skills. These 5 stood out — from a chart-selection encyclopedia to a three-script CSV profiling toolkit.
We installed and scored 11 systems programming skills. These 5 stood out — from Apollo's 2,400-line Rust handbook to production Go concurrency patterns.
Top 5 cloud infrastructure skills from our scored review — Terraform state migrations, Cloudflare anti-pattern catalogs, and 4,000+ lines of guidance.
Top 5 Next.js AI skills from our scored review — including an eval-proven bundle that raised pass rates from 32% to 78% and a 50-line upgrade assistant.
Anthropic's Mythos Preview discovered zero-days in every major OS and browser. Defenders have months, not years, to adapt. Here's what to do now.
Top 5 security auditing skills from our scored review — 146 vulnerability vectors, 11 footgun databases, and a real-time GitHub supply chain auditor.
We installed and scored 8 git workflow skills. These 5 stood out — with rebase playbooks, branch cleanup safety gates, and changelog automation pipelines.
We installed and scored 13 database skills. These 5 stood out — with 3,000+ lines of Postgres rules, query optimization patterns, and migration playbooks.
Top 5 API development skills from our scored review — a 25-file multi-framework implementation guide and an RFC 9457 error system with agent extensions.
Top 5 TypeScript AI skills from our scored review — a 14-file type system encyclopedia and a spec-to-types converter that writes type guards for you.
Top 5 documentation AI skills from our scored review — structured co-authoring workflows, 885-line reference templates, and ready-to-use README frameworks.
We installed and scored 11 performance skills. These 5 stood out -- with 11,000+ lines of profiling rules, optimization patterns, and benchmarking workflows.
We installed and scored 14 refactoring skills. These 5 stood out — with safety checklists, complexity scoring systems, and 2,900+ lines of refactoring patterns.
We installed and scored 23 code review skills. These 5 stood out — with real checklists, multi-agent workflows, and 1,500+ lines of review patterns.
We installed and scored 17 React skills. These 5 earned their spot — from Vercel's 20-file Next.js encyclopedia to a typed state management cookbook.
We installed and scored 18 testing skills. These 5 earned their spot — from a 61-file Playwright encyclopedia to strict TDD enforcement.
We installed and scored 20 Python skills. These 5 deliver — from 736 lines of async patterns to Sentry's zero-false-positive Django auditor.
Snyk scanned 3,984 AI agent skills: 36% had security flaws, 534 critical issues, 76 active malware. What this means for developers installing skills.
MCP tool descriptions are visible to your AI agent but hidden from you. Attackers embed instructions that hijack agent behavior and steal credentials.
Langflow's critical RCE was weaponized in 20 hours. Combined with new LangChain and LangGraph CVEs, AI framework infrastructure is under active attack.
TeamPCP compromises legitimate packages and cascades through the supply chain via stolen credentials. Why this attack pattern evades detection.
Claude Code skills can read files, run commands, and access credentials. What the skill ecosystem gets wrong about security — and how to protect yourself.
Attackers injected a credential stealer into litellm (95M downloads) via compromised CI/CD. What happened and why AI skills face the same threat.
A new paper achieves 97.5% attack success against Claude Code using poisoned skills. Here's what we found, and the four detection rules we shipped in response.
A skill without a demo is a black box. Why recording a real agent session is the highest-leverage thing you can do to earn trust and drive installs.
Post-mortem of ClawHavoc — the largest AI skill supply chain attack on record — and what it reveals about the limits of reactive security models.
Comparing install-time scanning, reactive moderation, and dual-side verification — and the supply chain attack vectors each security model misses.
SkillSafe skills can improve from real usage feedback. How the observe-improve-save loop works and how to opt your skills into automatic iteration.
341 malicious AI skills were found on a major registry. SkillSafe scans before sharing, re-verifies on install, and blocks tampered code automatically.
How SkillSafe dual-side verification works: publisher scans, consumer re-scans, and cryptographic tree hashes that detect tampering before install.