domains / families / devops / aegisops-ai

aegisops-ai

authentic

Autonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.

When to use

• **Kernel Patch Review:** Auditing raw C-based Git diffs for memory safety.
• **Pre-Apply IaC Audit:** Analyzing `terraform plan` outputs to prevent bill spikes.
• **Cluster Hardening:** Generating "Least Privilege" securityContexts for deployments.
• **CI/CD Quality Gating:** Blocking non-compliant merges via GitHub Actions.

When not to use

• **Web App Logic:** Do not use for standard web vulnerabilities (XSS, SQLi); use dedicated SAST scanners.
• **Non-C Memory Analysis:** The patch analyzer is optimized for C-logic; avoid using it for high-level languages like Python or JS.
• **Direct Resource Mutation:** This is an *auditor*, not a deployment tool. It does not execute `terraform apply` or `kubectl apply`.
• **Post-Mortem Analysis:** For analyzing *why* a previous AI session failed, use `/analyze-project` instead.
• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Skill page

Source