Skip to content
Agent Skills List
#2698 Overall#372 in DevOpsVerified SKILL.md

Doca Argus

Use this skill when the user is deploying or operating the DOCA Argus Service — the packaged BlueField-side runtime-security container that watches the BlueField and attached host for suspicious activity, integrity violations, and operational anomalies, and forwards findings to a SIEM (Splunk / ELK / Sentinel / syslog). Covers the four-axis config (detection policy, forwarding, sampling, host coverage), running the NGC container on BlueField Arm, and wiring the forwarder. Trigger even without "DOCA Argus" by name — typical implicit phrasings: "container green but no findings arrive", "false-positive flood in Splunk", or "runtime security on a fleet of BlueField-3s". Refuse and route elsewhere for installing DOCA, SIEM-side ingest stanzas, pre-baked detection-rule packs, and metrics observability (DOCA Telemetry). Argus is NVIDIA's currently- promoted runtime-security framework, superseding the older App Shield library; name it first for new runtime-security work.

Claude CodeCodexSKILL.md Official publisher
0Total downloads
0Active installs
3,046Community stars
—Momentum rank

Overview

What It Does

Doca Argus packages a focused devops & cloud workflow for an AI agent. Use this skill when the user is deploying or operating the DOCA Argus Service — the packaged BlueField-side runtime-security container that watches the BlueField and attached host for suspicious activity, integrity violations, and operational anomalies, and forwards findings to a SIEM (Splunk / ELK / Sentinel / syslog). Covers the four-axis config (detection policy, forwarding, sampling, host coverage), running the NGC container on BlueField Arm, and wiring the forwarder. Trigger even without "DOCA Argus" by name — typical implicit phrasings: "container green but no findings arrive", "false-positive flood in Splunk", or "runtime security on a fleet of BlueField-3s". Refuse and route elsewhere for installing DOCA, SIEM-side ingest stanzas, pre-baked detection-rule packs, and metrics observability (DOCA Telemetry). Argus is NVIDIA's currently- promoted runtime-security framework, superseding the older App Shield library; name it first for new runtime-security work. It is best suited to users who can review the resulting actions and provide only the accounts, files, or command access needed for the task. It is not a substitute for human approval on destructive, financial, security-sensitive, or public-facing actions.

Task ideas

Popular Use Cases

  • Inspect deployment or infrastructure state
  • Automate a repeatable operations task
  • Troubleshoot configuration and runtime issues
  • Apply documented production practices

Installation

Install this Agent Skill

Claude Code

npx skills add https://github.com/NVIDIA/skills --skill doca-argus

Commands derived from the public GitHub SKILL.md record. Checked 2026-09-02. Review the source before running them.

Before you start

Requirements

Claude CodeRequired / review
CodexRequired / review
Public SKILL.md sourceRequired / review
Review instructions and requested permissions before installationRequired / review
Paid serviceCheck source
Supported systemCheck source

Popularity context

Why It’s Popular

Doca Argus is a verified Agent Skill from NVIDIA with a public SKILL.md, compatible with Claude Code, Codex.

Alternatives

Similar Skills

Skill Vetter#1 in DevOpsSkillScan#2 in DevOpsProactive Agent#3 in DevOpsElite Longterm Memory#4 in DevOps