joogy06/agent-foundry/ansible
Claude Code and agent skill by joogy06/agent-foundry
- community
Checking that the SKILL.md file is still in the repository.
Use when automating infrastructure with Ansible — playbook development (tasks, handlers, variables, templates, conditionals, loops), role design (Galaxy structure, defaults, dependencies), inventory management (static/dynamic, groups, host_vars/group_vars), collections (ansible.builtin, community, custom), Ansible Vault (encryption), AWX/Ansible Automation Platform (job templates, workflows, RBAC, surveys), module development, testing (Molecule, ansible-lint), and performance tuning (forks, pipelining, async). Part of the automation-* skill family.
Install
npx vskill@latest install joogy06/agent-foundry/ansibleSKILL.md
Ansible Automation — Admin & Developer
Covers Ansible core (ansible-core 2.15+/2.16+/2.17+), collections ecosystem, AWX/Ansible Automation Platform, and testing. For target node configuration see: rhel-server-admin, ubuntu-server-admin, windows-powershell.
<HARD-RULE> Never store plaintext secrets in playbooks or inventory — always use Ansible Vault or external secret managers (HashiCorp Vault, AWS Secrets Manager). </HARD-RULE>
<HARD-RULE> Always use fully qualified collection names (FQCN) for modules — bare module names are deprecated and cause ambiguity with collections. </HARD-RULE>
<HARD-RULE> Never use command/shell modules when a purpose-built module exists — idempotent modules (apt, yum, copy, template, service) are safer and provide proper changed/ok reporting. </HARD-RULE>
<HARD-RULE> Always set changed_when on command/shell tasks — without it, Ansible always reports changed, making idempotency checks useless. </HARD-RULE>
Reference Files
Detailed code examples, patterns, and configuration are in the reference files below. Read the relevant file when working on that area.
| File | Covers | |
|---|---|---|
| awx-security-performance-testing.md | AWX/Ansible Automation Platform (job templates, workflows, RBAC, surveys, API), security patterns (secret management, SSH hardening, lint rules), performance tuning (forks, pipelining, mitogen, fact caching), and testing (Molecule, ansible-lint, CI integration) | |
| fundamentals-playbooks.md | installation, playbook structure, ad-hoc commands, ansible.cfg, connection types, tasks (core patterns, variables, conditionals, loops, blocks, error handling), handlers, includes vs imports | |
| inventory-vault-advanced.md | inventory management (static/dynamic, group_vars/host_vars, patterns), Ansible Vault (encryption commands, vault IDs, rekeying), and advanced patterns (delegation, serial/rolling, async, custom modules, callback plugins, dynamic includes) | |
| templates-roles-collections.md | Jinja2 templates, file management modules, role design (Galaxy structure, defaults, dependencies), and collections (installing, using, creating custom collections) |
Anti-Patterns
| Anti-Pattern | Why It Fails | Correct Approach | |
|---|---|---|---|
Using command/shell for package installs | Not idempotent — reruns always show changed, no rollback, no version pinning | Use ansible.builtin.dnf, ansible.builtin.apt, or platform-specific package modules | |
| Hardcoding IPs and hostnames in playbooks | Breaks when inventory changes, makes playbooks non-portable | Use inventory variables, host_vars/group_vars, and dynamic inventory plugins | |
| One massive playbook with no roles | Becomes unmaintainable past 200 lines, no reuse across projects | Break into roles with Galaxy structure; one role = one concern | |
| Storing vault password in the repo | Anyone with repo access can decrypt all secrets | Use --vault-password-file pointing to a file outside the repo, or integrate with external secret manager | |
Running playbooks without --check --diff first in production | Unexpected changes hit live systems with no preview | Always dry-run with --check --diff on production inventories before applying | |
Ignoring ansible-lint warnings | Leads to deprecated syntax, bare module names, and missing changed_when — breaks on ansible-core upgrades | Run ansible-lint in CI; treat warnings as errors for production playbooks |
Related Skills
| Domain | Skill | |
|---|---|---|
| RHEL server admin (targets) | rhel-server-admin | |
| Ubuntu server admin (targets) | ubuntu-server-admin | |
| Windows PowerShell (WinRM targets) | windows-powershell | |
| Docker containers | docker-admin | |
| Database config on RHEL | rhel-databases | |
| Database config on Ubuntu | ubuntu-databases | |
| IBM MQ automation | ibm-mq | |
| IBM WebSphere automation | ibm-websphere | |
| Centrify/AD integration | linux-centrify | |
| BMC Control-M job scheduling | control-m |
Security
- Security scanPassed, 95 of 100Pattern checks on the skill's files.
- Model reviewPassed
Quality evaluation
- Task evaluationNot runNo evaluation yet. Run one in Skill Studio.
Source
- SKILL.md in the repositoryCheckingskills/ansible/SKILL.md
Popularity
- Repository stars
- 2
- 7-day trend score
- 5
Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.
Works with
Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.
- Claude Code
- Cursor
- GitHub Copilot
- Windsurf
- Codex
- Gemini CLI
- Cline
- Amp
- Roo Code
- Goose
- Continue
- Kilo Code
- Junie
- Trae
- OpenHands
- Qwen Code
- AI Agent
- Tabnine Chat
- Sourcegraph Cody
- Amazon Q
- Firebase Genkit
- Sweep
- Devin
- Phind
- Mentat
- Claude Desktop
- Aider
- GPT Pilot
- Plandex
- bolt.new
- v0
- Replit Agent
- Anse
- TypingMind
- BetterChatGPT
- LibreChat
- Warp AI
- Pieces
- Fig AI
Embed badge
[](https://verified-skill.com/skills/joogy06/agent-foundry/ansible)