kubernetes-skill
bylukasniessen· 2 skills
Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating manifests, Helm charts, Kustomize overlays, cluster policies, and platform-specific Kubernetes work for EKS, GKE, AKS, OpenShift, GitOps controllers, or observability stacks.
How to install kubernetes-skill?
lukasniessen/kubernetes-skill
$npx -y skills add lukasniessen/kubernetes-skill --skill kubernetes-skillInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/lukasniessen/kubernetes-skill" --skill "lukasniessen/kubernetes-skill"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/lukasniessen/kubernetes-skill" that are relevant to the current task. Run `npx skills add "https://github.com/lukasniessen/kubernetes-skill"` and select the relevant skills, then follow their instructions.
SKILL.md
| 1 | # Kubernetes Skill for Claude Code and Codex: KubeShark |
| 2 | |
| 3 | <div align="center" name="top"> |
| 4 | <img align="center" src="assets/logo.png" width="180" height="180" alt="KubeShark Logo"> |
| 5 | |
| 6 | <!-- spacer --> |
| 7 | <p></p> |
| 8 | |
| 9 | [](https://docs.claude.ai/docs/agent-skills) |
| 10 | [](https://developers.openai.com/codex/skills/) |
| 11 | [](https://opensource.org/licenses/MIT) |
| 12 | [](https://github.com/LukasNiessen/kubernetes-skill) |
| 13 | |
| 14 | </div> |
| 15 | |
| 16 | The #1 Kubernetes skill for Claude Code and Codex, measured by GitHub stars. |
| 17 | |
| 18 | ### Fixes Hallucinations. |
| 19 | |
| 20 | LLMs hallucinate a lot when it comes to Kubernetes. They omit security contexts, generate deprecated APIs, use wildcard RBAC, forget resource limits, and produce probes that cause cascading failures. This skill fixes it. It includes best practices for Kubernetes -- good, bad, and neutral examples so the AI avoids common mistakes. Using KubeShark, the AI keeps proven practices in mind, eliminates hallucinations, and defaults to secure, reliable, production-ready manifests. |
| 21 | |
| 22 | KubeShark is built as the production-grade Kubernetes skill for Claude Code and Codex: broader than resource-template skills, safer than generic Kubernetes prompts, and tuned for hallucination prevention instead of raw tutorial volume. |
| 23 | |
| 24 | ### Very Token-Efficient. |
| 25 | |
| 26 | Most Kubernetes skills dump huge walls of text onto the agent and burn expensive tokens -- with no upside. LLMs don't need the entire Kubernetes docs again. KubeShark was aggressively de-duplicated and optimized for maximum quality per token. |
| 27 | |
| 28 | ### Based on Official Best Practices. |
| 29 | |
| 30 | KubeShark is primarily based on the [official Kubernetes documentation](https://kubernetes.io/docs/), the [NSA/CISA Kubernetes Hardening Guide](https://media.defense.gov/2022/Aug/29/2003066362/-1/-1/0/CTR_KUBERNETES_HARDENING_GUIDANCE_1.2_20220829.PDF), [OWASP Kubernetes Top 10](https://owasp.org/www-project-kubernetes-top-ten/), [Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/), and the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes). When guidance conflicts, it prioritizes official Kubernetes documentation. |
| 31 | |
| 32 | --- |
| 33 | |
| 34 | [Quick Start](#-quick-start) · [Why KubeShark](#-why-kubeshark) · [Token Strategy](#-token-strategy) · [What's Included](#-whats-included) · [How It Works](#-how-it-works) · [Sponsor](https://github.com/sponsors/LukasNiessen) · [Philosophy](PHILOSOPHY.md) |
| 35 | |
| 36 | --- |
| 37 | |
| 38 | ## 2 min Quickstart |
| 39 | |
| 40 | ### Option 1: Skills CLI |
| 41 | |
| 42 | If you manage skills with the `skills` CLI, install KubeShark directly from GitHub: |
| 43 | |
| 44 | ```bash |
| 45 | npx skills add https://github.com/lukasniessen/kubernetes-skill --skill kubernetes-skill |
| 46 | ``` |
| 47 | |
| 48 | ### Option 2: Clone |
| 49 | |
| 50 | **macOS / Linux:** |
| 51 | |
| 52 | ```bash |
| 53 | git clone https://github.com/LukasNiessen/kubernetes-skill.git ~/.claude/skills/kubernetes-skill |
| 54 | ``` |
| 55 | |
| 56 | **Windows (Powershell):** |
| 57 | |
| 58 | ```powershell |
| 59 | git clone https://github.com/LukasNiessen/kubernetes-skill.git "$env:USERPROFILE\.claude\skills\kubernetes-skill" |
| 60 | ``` |
| 61 | |
| 62 | **Windows (Command Prompt):** |
| 63 | |
| 64 | ```powershell |
| 65 | git clone https://github.com/LukasNiessen/kubernetes-skill.git "%USERPROFILE%\.claude\skills\kubernetes-skill" |
| 66 | ``` |
| 67 | |
| 68 | That's it. Claude Code auto-discovers skills in `~/.claude/skills/` -- no restart needed. |
| 69 | |
| 70 | ### Option 3: Marketplace |
| 71 | |
| 72 | Claude Code has a built-in plugin system with marketplace support. Instead of cloning manually, you can add KubeShark's marketplace and install directly from the CLI: |
| 73 | |
| 74 | ``` |
| 75 | /plugin marketplace add LukasNiessen/kubernetes-skill |
| 76 | /plugin install kubernetes-skill |
| 77 | ``` |
| 78 | |
| 79 | Or use the interactive plugin manager -- run `/plugin`, switch to the **Discover** tab, and install from there. The marketplace reads the `.claude-plugin/marketplace.json` in this repo to register KubeShark as an installable plugin. |
| 80 | |
| 81 | ### Option 4: Codex |
| 82 | |
| 83 | Codex has no global skill system -- setup is per-project. Clone KubeShark into your repo and reference it from your `AGENTS.md`: |
| 84 | |
| 85 | ```bash |
| 86 | # Clone into your project root |
| 87 | git clone https://github.com/LukasNiessen/kubernetes-skill.git .kubernetes-skill |
| 88 | ``` |
| 89 | |
| 90 | Then add to your `AGENTS.md` (or create one in the repo root): |
| 91 | |
| 92 | ```markdown |
| 93 | ## Kubernetes |
| 94 | |
| 95 | When working with Kubernetes manifests, Helm charts, or Kustomize overlays, follow the workflow in `.kubernetes-skill/SKILL.md`. |
| 96 | Load references from `.kubernetes-skill/references/` as needed. |
| 97 | ``` |
| 98 | |
| 99 | ### That's it! |
| 100 | |
| 101 | Done. Now ask Claude Code / Codex any Kubernetes question. KubeShark responses follow the 7-step failure-mode workflow and include an output contract with assumptions, tradeoffs, and rollback notes. |
| 102 | |
| 103 | **Invoke explicitly:** |
| 104 | |
| 105 | ```bash |
| 106 | /kubernetes-skill Create a production-ready Deployment with an Ingress and autoscaling |
| 107 | ``` |
| 108 | |
| 109 | ```bash |
| 110 | /kubernetes-skill Review my Deployment for security issues and add proper RBAC, NetworkPolicies, |
Related
6 picksType
- setup-matt-pocock-skillsConfigure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout.Jul 2026
- microsoft-foundryDeploy, evaluate, fine-tune, and manage Foundry agents end-to-end with azd: hosted agent scaffold/run/deploy, prompt agent create, batch eval, continuous eval,…Jul 2026
- azure-deployExecute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files.Jul 2026
- azure-preparePrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd)…Jul 2026
- azure-validatePre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity…Jul 2026
- azure-aigatewayConfigure Azure API Management as an AI Gateway for AI models, MCP tools, and agents.Jul 2026
