Automates TLS certificate lifecycle management across all GitOps-managed clusters. Detects expiring certificates, generates new ones, updates manifests, and handles rotation workflows with proper validation and rollback capabilities.
SkillScore95Maintained
Automatic
◆DevOps & SRE pack
Last verified 8/4/2026
What it changes
Passed 21 of 22 test cases with the skill, and 9 of 22 without it.
Without skill41%
With skill95%
Checks it passed that the model alone missed
Specifies 90 days for rollback retention
Specifies 300 seconds as the validation timeout
Includes Slack notification channel #cert-rotation
and 7 more in the full report
12 fixed9 passed either way1 still failing0 broke
Pass-rate lift
+55 pp
Tokens
+14%
Agent turns
0%
Response time
-49%
Model gemini-3.6-flashMeasured 8/4/2026v121 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 12
Prompt
After running discovery scripts and before creating pull requests or updating manifests, what step must be performed to schedule rotations?
What was checked, without and with the skill
Checked
Without skill
With skill
Conducts a manual review and planning phase to prioritize schedule based on criticality
Missed
Passed
case-10 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md172 lines2 filesincludes scripts
Certificate Rotation Skill
This skill automates the complete TLS certificate lifecycle management process across GitOps-managed infrastructure.
When to Use
Use this skill when:
Certificates are approaching expiration (within 30 days)
You need to bulk update certificates across multiple clusters
Certificate authorities or signing methods need to be changed
Security policies require certificate refresh
What This Skill Does
1. Certificate Discovery
Scans all GitOps repositories for TLS certificate references
Identifies certificates in Kubernetes secrets, config maps, and manifests
Checks certificate expiration dates and chain validity
Maps certificate dependencies and relationships
2. Expiration Analysis
Calculates time to expiration for all certificates
Prioritizes certificates based on criticality and expiration timeline