---

name: ansible-config description: Ansible configuration management and automation with safety controls version: 1.0.0 allowed-tools: [Bash, Read, Glob]

Ansible Configuration Skill

Overview

Provides 90%+ context savings vs raw Ansible operations. Includes critical safety controls for remote execution and configuration management.

Requirements

• Ansible CLI (v2.9+)
• SSH access to target hosts
• Inventory file or dynamic inventory
• Optional: ANSIBLE_CONFIG, ANSIBLE_INVENTORY environment variables

Tools (Progressive Disclosure)

Playbook Execution

Inventory Management

Ad-hoc Commands

Galaxy (Roles & Collections)

Vault (Secrets)

Configuration & Documentation

Blocked Operations

Quick Reference

Copy# Run playbook
ansible-playbook site.yml

# Check mode (dry run)
ansible-playbook site.yml --check

# Show diff
ansible-playbook site.yml --diff

# Ping all hosts
ansible all -m ping

# List inventory
ansible-inventory --list

# View vault file
ansible-vault view secrets.yml

# Install galaxy role
ansible-galaxy install username.rolename

Configuration

• ANSIBLE_CONFIG: Path to ansible.cfg file
• ANSIBLE_INVENTORY: Path to inventory file
• ANSIBLE_VAULT_PASSWORD_FILE: Path to vault password file
• Working directory: Must contain playbooks and inventory

Safety Controls

⚠️ All remote execution commands require confirmation ⚠️ Vault operations require confirmation ⚠️ shell/command modules with destructive operations are BLOCKED ⚠️ raw module is BLOCKED (use shell/command instead) ⚠️ Review playbook changes with --diff before applying

Agent Integration

• devops (primary): Infrastructure automation, configuration management
• security-architect (secondary): Vault secrets, secure playbooks
• cloud-integrator (secondary): Cloud inventory, dynamic provisioning

Troubleshooting