Production-grade platform engineering handbook — Kubernetes, Terraform, Flux CD, GitHub Actions, AWS, and more.
64
80%
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Routes to mode-specific reference files. Only load what the mode needs.
| Mode | Load |
|---|---|
| generate | setup-agents-build.md, setup-agents-prompts.md, setup-agents-schemas.md, setup-agents-template.md |
| upgrade | setup-agents-build.md, setup-agents-prompts.md, setup-agents-schemas.md, setup-agents-template.md |
| add | setup-agents-add.md, setup-agents-prompts.md, setup-agents-schemas.md |
| review | setup-agents-review.md |
| Signal | Confidence | Agent |
|---|---|---|
| Terraform / CDK / SAM / Pulumi + deploy workflow | HIGH | infra |
| FastAPI / Express / Rails / Spring / Spring Boot / Django | HIGH | app |
build.gradle.kts / settings.gradle.kts / Kotlin source in src/main/kotlin/ | HIGH | app (Kotlin/Spring Boot) |
pom.xml or build.gradle with spring-boot-starter dependency | HIGH | app (Spring Boot) |
| GHA workflows are the product (reusable/composite) | HIGH | platform |
| pytest / jest / go test / rspec / JUnit / Kotest | MEDIUM | test-writer (offer) |
| Airflow / Prefect / dbt / Glue / Step Functions | HIGH | data-pipeline |
| torch / sklearn / sagemaker / mlflow | HIGH | ml |
| Any repo | ALWAYS | navigator (offer) |
| boto3 only, no IaC, no framework | AMBIGUOUS | ask 1 question |
| Monorepo with 3+ signals | MINIMUM SET | generate confident + ask team ownership |
Line 1 check: <!-- generated by platform-skills -->
The same marker check applies to every per-tool agent file. See references/setup-agents-schemas.md → "Managed-file marker" for the per-format rule and the managed() helper — that file is the single source of truth for this rule.
The .platform-skills/ directory is structural metadata — commit it. It is not personal state.
manifest — defines which tool targets were generated; scripts/verify-agents.sh reads it. If gitignored, CI will silently skip all tool-target checks and report 0 issues..platform-skills/ is gitignored (e.g. via a .* glob), remove the exclusion.One token per line. Lines starting with # are comments. Blank lines ignored.
Valid tokens:
| Token | File verified |
|---|---|
copilot-vscode | .github/agents/*.agent.md |
copilot-cloud | .github/agents/*.agent.md (cloud target) |
copilot-app | .github/copilot-setup-steps.yml |
cursor | .cursor/rules/*.mdc |
codex | agents/openai.yaml |
windsurf | .windsurfrules |
vscode-mcp | .vscode/mcp.json (servers key) or .vscode/settings.json (github.copilot.chat.mcpServers key) |
Example:
# generated by platform-skills setup-agents
copilot-vscode
codexscripts/verify-agents.sh reads this file to know which checks to run. generate writes it at Step 9. add appends to it at Step 7. upgrade reads it to know which tool paths to scan.
.claude-plugin
.github
assets
commands
docs
examples
agent-self-improve
argocd
awesome-docs
aws
cloudfront
functions
lambda-edge
functions
azure
compliance
conventional-commits
datadog
llm-observability
demo
documentation
dora
dynatrace
fluxcd
github-actions
composite-actions
configure-cloud
db-migrate
docker-build-push
k8s-deploy
notify-slack
pr-comment
release-tag
security-scan
setup-env
setup-terraform
terraform-plan
helm
web-service
templates
karpenter
kubernetes
kyverno
mcp
observability
openshift
pr-review
ownership
runtime-security
setup-agents
terraform
references
scripts
skills
platform-skills
tests