跳到主要内容
知知仓学习社ZHICANG

devops

Deploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm). Use for serverless, containers, CI/CD, GitOps, sec…

读凭据执行命令写文件读文件联网严重 4 · 高危 11mrgoonie/claudekit-skills

它会碰到什么

扫了多少29 个文本文件，130 KB
它会碰到什么读凭据执行命令写文件读文件联网
命中总数50 处
命中统计严重 4 · 高 11 · 中 3 · 低 0
逐条看命中（15 条严重或高危）
  • 严重 references/docker-basics.md:55cred-paths
    .git
  • 严重 references/docker-compose.md:189cred-paths
    **Using .env file:**
  • 严重 references/docker-compose.md:191cred-paths
    # .env
  • 严重 references/docker-compose.md:200cred-paths
    - .env
  • 高 scripts/cloudflare_deploy.py:76exec-spawn
    result = subprocess.run(
  • 高 scripts/cloudflare_deploy.py:106exec-spawn
    result = subprocess.run(
  • 高 scripts/docker_optimize.py:171fs-destructive
    if 'rm -rf /var/lib/apt/lists/*' not in line:
  • 高 scripts/docker_optimize.py:176fs-destructive
    'suggestion': 'Add && rm -rf /var/lib/apt/lists/* to reduce image size'
  • 高 scripts/tests/test_cloudflare_deploy.py:92exec-spawn
    @patch('subprocess.run')
  • 高 scripts/tests/test_cloudflare_deploy.py:101exec-spawn
    @patch('subprocess.run')
  • 高 scripts/tests/test_cloudflare_deploy.py:106exec-spawn
    @patch('subprocess.run')
  • 高 scripts/tests/test_cloudflare_deploy.py:182exec-spawn
    @patch('subprocess.run')
  • 高 scripts/tests/test_cloudflare_deploy.py:197exec-spawn
    @patch('subprocess.run')
  • 高 scripts/tests/test_cloudflare_deploy.py:206exec-spawn
    @patch('subprocess.run')
  • 高 scripts/tests/test_docker_optimize.py:258fs-destructive
    RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

技能内容

DevOps Skill

Deploy and manage cloud infrastructure across Cloudflare, Docker, Google Cloud, and Kubernetes.

When to Use

  • Deploy serverless apps to Cloudflare Workers/Pages
  • Containerize apps with Docker, Docker Compose
  • Manage GCP with gcloud CLI (Cloud Run, GKE, Cloud SQL)
  • Kubernetes cluster management (kubectl, Helm)
  • GitOps workflows (Argo CD, Flux)
  • CI/CD pipelines, multi-region deployments
  • Security audits, RBAC, network policies

Platform Selection

| Need | Choose |

|------|--------|

| Sub-50ms latency globally | Cloudflare Workers |

| Large file storage (zero egress) | Cloudflare R2 |

| SQL database (global reads) | Cloudflare D1 |

| Containerized workloads | Docker + Cloud Run/GKE |

| Enterprise Kubernetes | GKE |

| Managed relational DB | Cloud SQL |

| Static site + API | Cloudflare Pages |

| Container orchestration | Kubernetes |

| Package management for K8s | Helm |

Quick Start

# Cloudflare Worker
wrangler init my-worker && cd my-worker && wrangler deploy

# Docker
docker build -t myapp . && docker run -p 3000:3000 myapp

# GCP Cloud Run
gcloud run deploy my-service --image gcr.io/project/image --region us-central1

# Kubernetes
kubectl apply -f manifests/ && kubectl get pods

Reference Navigation

Cloudflare Platform

  • cloudflare-platform.md - Edge computing overview
  • cloudflare-workers-basics.md - Handler types, patterns
  • cloudflare-workers-advanced.md - Performance, optimization
  • cloudflare-workers-apis.md - Runtime APIs, bindings
  • cloudflare-r2-storage.md - Object storage, S3 compatibility
  • cloudflare-d1-kv.md - D1 SQLite, KV store
  • browser-rendering.md - Puppeteer automation

Docker

  • docker-basics.md - Dockerfile, images, containers
  • docker-compose.md - Multi-container apps

Google Cloud

  • gcloud-platform.md - gcloud CLI, authentication
  • gcloud-services.md - Compute Engine, GKE, Cloud Run

Kubernetes

  • kubernetes-basics.md - Core concepts, architecture, workloads
  • kubernetes-kubectl.md - Essential commands, debugging workflow
  • kubernetes-helm.md / kubernetes-helm-advanced.md - Helm charts, templates
  • kubernetes-security.md / kubernetes-security-advanced.md - RBAC, secrets
  • kubernetes-workflows.md / kubernetes-workflows-advanced.md - GitOps, CI/CD
  • kubernetes-troubleshooting.md / kubernetes-troubleshooting-advanced.md - Debug

Scripts

  • scripts/cloudflare-deploy.py - Automate Worker deployments
  • scripts/docker-optimize.py - Analyze Dockerfiles

Best Practices

Security: Non-root containers, RBAC, secrets in env vars, image scanning

Performance: Multi-stage builds, edge caching, resource limits

Cost: R2 for large egress, caching, right-size resources

Development: Docker Compose local dev, wrangler dev, version control IaC

Resources

  • Cloudflare: https://developers.cloudflare.com
  • Docker: https://docs.docker.com
  • GCP: https://cloud.google.com/docs
  • Kubernetes: https://kubernetes.io/docs
  • Helm: https://helm.sh/docs

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

去原始仓库

它属于哪个仓库

仓库mrgoonie/claudekit-skills
星标★ 2,216
本站分层T1
该仓技能数45
原文件路径.claude/skills/devops/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 45 个技能