infras-kit-81b7ad 100/100

Is infras-kit-81b7ad safe to install?

SaferSkills independently audited infras-kit-81b7ad (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md7.2 KB · Markdown

<a id="readme-top"></a>

<h1 align="center">Infras Kit</h1>

Turn infrastructure tickets into shippable plans and safe implementations. <a href="docs/infras-kit/flow.md">Explore the flow docs »</a> <a href="#install">Install</a> · <a href="#usage">Usage</a> · <a href="CONTRIBUTING.md">Contributing</a> </div>

<details> <summary>Table of Contents</summary> <ol> <li><a href="#about-the-project">About The Project</a></li> <li> <a href="#getting-started">Getting Started</a> <ul> <li><a href="#prerequisites">Prerequisites</a></li> <li><a href="#install">Install</a></li> </ul> </li> <li><a href="#usage">Usage</a></li> <li><a href="#skill-catalog">Skill Catalog</a></li> <li><a href="#repo-layout">Repo Layout</a></li> <li><a href="#license">License</a></li> </ol> </details>

About The Project

Infras Kit screenshot

Infras Kit is a lightweight infrastructure delivery framework and skill pack for agents like Codex, Claude Code, and OpenCode.

It standardizes repeatable artifacts (ticket.md, spec.md, plan.md, tasks.md) and pushes safe delivery defaults:

explicit rollout and rollback steps
verification evidence and “done” checks
security-first repo and CI/CD guardrails

(<a href="#readme-top">back to top</a>)

Built With

Markdown-first workflow under docs/
Shell scripts for scaffolding/validation under scripts/ and infras-kit-plugin/skills/*/scripts/
Skill packs under infras-kit-plugin/skills/

(<a href="#readme-top">back to top</a>)

Getting Started

Prerequisites

git
bash

Install

#### Quick install (recommended)

bash scripts/install-opencode-skills.sh --global      # symlinks under ~/.config/opencode/skills
# or
bash scripts/install-opencode-skills.sh --project .   # writes .opencode/skills inside this repo

Enable the plugin/skill pack in Codex, Claude, or OpenCode using their standard local-plugin entry and point it at infras-kit-plugin/.

#### Manual symlink install

SKILL_ROOT="$(pwd)/infras-kit-plugin/skills"
mkdir -p ~/.agents/skills ~/.config/opencode/skills
for skill in infra-kit.workflow infra-kit.workflow.thinking infra-kit.workflow.research infra-kit.workflow.design infra-kit.workflow.verify infra-kit.workflow.review infra-kit.domain.iac infra-kit.domain.helm infra-kit.domain.k8s-doctor infra-kit.domain.github infra-kit.workflow.audit; do
  ln -sf "$SKILL_ROOT/$skill" ~/.agents/skills/$skill
  ln -sf "$SKILL_ROOT/$skill" ~/.config/opencode/skills/$skill
done

#### Copy-only environments

Some managed laptops block symlinks. After pulling the repo, copy the folders instead:

SKILL_ROOT="$(pwd)/infras-kit-plugin/skills"
DEST=~/.config/opencode/skills
mkdir -p "$DEST"
for skill in infra-kit.workflow infra-kit.workflow.thinking infra-kit.workflow.research infra-kit.workflow.design infra-kit.workflow.verify infra-kit.workflow.review infra-kit.domain.iac infra-kit.domain.helm infra-kit.domain.k8s-doctor infra-kit.domain.github infra-kit.workflow.audit; do
  rm -rf "$DEST/$skill"
  cp -R "$SKILL_ROOT/$skill" "$DEST/$skill"
done

(<a href="#readme-top">back to top</a>)

Usage

Scaffold a work item:

bash infras-kit-plugin/skills/infra-kit.workflow/scripts/new-work-item.sh "Reduce NAT Gateway spend" \
  --id "INFRA-1234" \
  --link "https://jira.example.com/browse/INFRA-1234"

Fill in docs/infras-kit/work-items/<nnn>-.../ticket.md, then drive spec.md -> plan.md -> tasks.md.
Implement tasks using the domain skill that matches the files you are changing.
Run infra-kit.workflow.verify to map acceptance criteria to checks and record evidence.
Use infra-kit.workflow.review to prepare a reviewable PR and respond to feedback.

Sample prompts:

Use infra-kit.domain.iac to review ./infra/live/prod for destructive change risk.
Use infra-kit.domain.helm to refactor ./charts/web with shared helpers and safer defaults.
Use infra-kit.domain.k8s-doctor to trace a 503 from ingress to Pod in namespace payments.
Use infra-kit.domain.github to harden ./.github/workflows/release.yml with minimal permissions.
Use infra-kit.workflow.verify to produce a verification matrix for INFRA-1234 and paste evidence into implementation-notes.md.
Use infra-kit.workflow.review to produce a PR body from the work item and confirm rollback + verification are clear.
Use infra-kit.workflow.audit to audit ./infra and ./.github/workflows for least-privilege and release safety.

(<a href="#readme-top">back to top</a>)

Skill Catalog

infra-kit.workflow: ticket -> spec -> plan -> tasks -> implementation notes (includes Confluence-ready update template)
infra-kit.workflow.thinking: structured problem solving and decision hygiene
infra-kit.workflow.research: version-aware, source-backed research briefs with a validation plan
infra-kit.workflow.design: requirements-first infrastructure design with rollout/rollback and ownership
infra-kit.workflow.verify: definition-of-done verification gate and evidence capture
infra-kit.workflow.review: PR readiness checklist and review-feedback loop hygiene
infra-kit.domain.iac: Terraform + Terragrunt authoring/review/validation
infra-kit.domain.helm: Helm chart authoring/review/validation
infra-kit.domain.k8s-doctor: read-only-first Kubernetes debugging (Pod -> Service -> routing)
infra-kit.domain.github: repo governance and workflow hardening (Actions, CODEOWNERS, templates)
infra-kit.workflow.audit: cross-cutting audit (least privilege, release safety, OWASP exposure)

(<a href="#readme-top">back to top</a>)

Repo Layout

.
├── README.md
├── images/
├── docs/
├── scripts/
└── infras-kit-plugin/
    ├── .claude-plugin/plugin.json
    ├── .codex-plugin/plugin.json
    └── skills/
        ├── infra-kit.workflow/SKILL.md
        ├── infra-kit.workflow.thinking/SKILL.md
        ├── infra-kit.workflow.research/SKILL.md
        ├── infra-kit.workflow.design/SKILL.md
        ├── infra-kit.workflow.verify/SKILL.md
        ├── infra-kit.workflow.review/SKILL.md
        ├── infra-kit.domain.iac/SKILL.md
        ├── infra-kit.domain.helm/SKILL.md
        ├── infra-kit.domain.k8s-doctor/SKILL.md
        ├── infra-kit.domain.github/SKILL.md
        └── infra-kit.workflow.audit/SKILL.md

(<a href="#readme-top">back to top</a>)

License

This repository currently does not include a LICENSE file.

(<a href="#readme-top">back to top</a>)

infras-kit-81b7ad— plugin

Is infras-kit-81b7ad safe to install?

About The Project

Built With

Getting Started

Prerequisites

Install

Usage

Skill Catalog

Repo Layout

License

Audit the pieces. Scan the whole. Decide.