MCP App StoreMCP App Store
from claude-code-production-grade-plugin148
Generates production-grade DevOps artifacts: containerization, CI/CD pipelines, Terraform IaC, monitoring, and security best-practices for autonomous deployment
This skill produces a full DevOps delivery: multi-stage Dockerfiles, CI/CD workflows, Terraform or Kubernetes manifests, monitoring dashboards, and security configurations. It provides templates, standards, and procedural guidance to set up production-ready deployments and observability.
Use when bootstrapping or hardening deployment infrastructure for a service or monorepo — greenfield or brownfield. It detects existing infra, prefers extension over replacement, and can run in different engagement modes (Express, Standard, Thorough, Meticulous) depending on desired autonomy and review levels.
Designed for Claude-like production orchestrators and agent frameworks that can apply file-level outputs and run parallel sub-tasks (Claude Code, Claude Production-Grade Suite, other advanced agent runtimes).
Comprehensive DevOps skill that generates production-grade infrastructure artifacts across 6 phases: assessment, Terraform IaC, CI/CD pipelines, container orchestration, monitoring, and security. Very detailed SKILL.md with engagement modes, process flows, and extensive best-practice standards. No bundled scripts to test. Uses shell command interpolation (`!`cat ...`) for loading external protocols which presents a minor shell injection risk in the skill definition pattern, though the content itself promotes security best practices throughout.
Well-structured, thorough DevOps skill with excellent coverage of infrastructure concerns. The `!`cat`` command interpolation pattern in the protocols section is the main security concern — it instructs the agent to execute shell commands to load files, which could be exploited if protocol files are compromised. Otherwise the skill promotes strong security practices (least privilege, zero trust, encryption, etc.). No scripts to execute or test.
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Spring Boot Migration
Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.
OpenShift Multi-Cluster Health Report
Generates consolidated health and resource reports across multiple OpenShift and Kubernetes clusters using the openshift-administration MCP server.
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy