Claude skills for Kubernetes

The 50 strongest of 197 Kubernetes skills on GitHub. Skills built for Kubernetes come first; no repository gets more than 3 spots. Each links to its folder; copy it into ~/.claude/skills/ to use it.

  1. k8s security policies

    Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.

    wshobson/agents★ 42kMITFolder: k8s-security-policies

  2. k8s manifest generator

    Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade…

    wshobson/agents★ 42kMITFolder: k8s-manifest-generator

  3. kubernetes specialist

    Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service accounts, define network isolation rules, debug pod crashes, analyze resource limits, inspect container logs, or…

    Jeffallan/claude-skills★ 12kMITFolder: kubernetes-specialist

  4. offensive k8s attacks

    Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and…

    SnailSploit/Claude-Red★ 9.8kMITFolder: offensive-k8s-attacks

  5. hunt k8s

    Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape,…

    elementalsouls/Claude-BugHunter★ 5.3kMITFolder: hunt-k8s

  6. azure kubernetes

    Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations…

    microsoft/azure-skills★ 1.6kMITFolder: azure-kubernetes

  7. azure kubernetes app deploy

    Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with…

    microsoft/azure-skills★ 1.6kMITFolder: azure-kubernetes-app-deploy

  8. azure kubernetes automatic readiness

    Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness,…

    microsoft/azure-skills★ 1.6kMITFolder: azure-kubernetes-automatic-readiness

  9. kubernetes ops

    Deploy, scale, and manage Kubernetes workloads. Create deployments, services, and configurations, manage cluster resources, troubleshoot pods, and implement production-ready Kubernetes patterns. Use when working with Kubernetes clusters, K8s deployments,…

    BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder: kubernetes-ops

  10. model serving kubernetes

    Deploy ML models on Kubernetes with KServe (formerly KFServing) and NVIDIA Triton Inference Server. Includes canary deployments, autoscaling, model versioning, A/B testing, and GPU resource management for production model serving.

    BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder: model-serving-kubernetes

  11. gpu kubernetes operations

    Operate GPU-backed Kubernetes clusters for AI inference and training with scheduling, autoscaling, node health, MIG partitioning, and cost controls.

    BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder: gpu-kubernetes-operations

  12. kubernetes operator

    Design, build, and operate Kubernetes operators. Use when extending Kubernetes with a custom controller, choosing a framework, designing CRDs, implementing reconciliation loops, or auditing an operator for anti-patterns.

    borghei/Claude-Skills★ 1kLicence: see repoFolder: kubernetes-operator

  13. azure kubernetes service

    Expert knowledge for Azure Kubernetes Service (AKS) development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when…

    MicrosoftDocs/Agent-Skills★ 797CC-BY-4.0Folder: azure-kubernetes-service

  14. kubernetes patterns

    Pod design patterns, sidecar containers, init containers, config management, rolling updates, and resource limits.

    vibeeval/vibecosystem★ 541MITFolder: kubernetes-patterns

  15. operating kubernetes

    Operating production Kubernetes clusters effectively with resource management, advanced scheduling, networking, storage, security hardening, and autoscaling. Use when deploying workloads to Kubernetes, configuring cluster resources, implementing security…

    ancoleman/ai-design-components★ 525MITFolder: operating-kubernetes

  16. kubernetes skill

    Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating…

    LukasNiessen/kubernetes-skill★ 468MITFolder: kubernetes-skill

  17. kubernetes

    Kubernetes operations: debugging, security, RBAC, and infrastructure tooling.

    notque/vexjoy-agent★ 443MITFolder: kubernetes

  18. container k8s escape

    Use when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivot

    hypnguyen1209/offensive-claude★ 403MITFolder: container-k8s-escape

  19. Kubernetes Chaos Testing

    Chaos testing for Kubernetes workloads using Chaos Mesh, Litmus, and custom fault injection for pod, network, and disk failures.

    PramodDutta/qaskills★ 244MITFolder: chaos-testing-kubernetes

  20. kubernetes deployment

    Deploy, manage, and scale applications on Kubernetes clusters using manifests, Helm charts, and autoscaling configurations. Use when the user requests kubernetes deployment or provides relevant inputs for this workflow.

    seb1n/awesome-ai-agent-skills★ 233MITFolder: kubernetes-deployment

  21. dt obs kubernetes

    Kubernetes cluster, pod, node, and workload monitoring. Use when analyzing K8s health, resource optimization, pod failures, OOMKills, scheduling, or security posture. Also use for Kubernetes operational events like pod restarts, OOM events, evictions, and…

    Dynatrace/dynatrace-for-ai★ 171Apache-2.0Folder: dt-obs-kubernetes

  22. kubernetes docs

    Draft, rewrite, or audit Kubernetes and cloud-native documentation using an independently expressed interpretation of Kubernetes documentation style. Use for concepts, tasks, tutorials, references, configuration, operations, and version-sensitive guidance…

    Neeeophytee/agent-stylebooks★ 78MITFolder: kubernetes-docs

  23. kubernetes architect

    Designs Kubernetes deployments, services, ingress, RBAC, Helm charts, and cluster architecture. Use when working with Kubernetes YAML files or when the user mentions Kubernetes, K8s, Helm, or container orchestration.

    tranhieutt/software_development_department★ 74MITFolder: kubernetes-architect

  24. kubernetes deployment patterns

    Kubernetes deployment strategies and workload patterns for production-grade applications. Use when deploying to Kubernetes, implementing rollout strategies, or designing cloud-native application architectures.

    NickCrew/Claude-Cortex★ 62MITFolder: kubernetes-deployment-patterns

  25. kubernetes security policies

    Kubernetes security policies, RBAC, and Pod Security Standards for hardened cluster deployments. Use when implementing cluster security, defining network policies, or enforcing security compliance in Kubernetes environments.

    NickCrew/Claude-Cortex★ 62MITFolder: kubernetes-security-policies

  26. k8s

    Kubernetes and container exploitation: identity/RBAC, secrets, kubelet/etcd, managed-cloud workload identities, container-to-node escape including CVE-2026-31431 Copy Fail, and Kubernetes-native persistence. Use when already in a Pod/container or holding…

    pale-knight/redteam-skill★ 51MITFolder: k8s

  27. kubernetes helper

    Author Kubernetes manifests — Deployments, Services, Ingress, ConfigMaps, Secrets, HPA, and Helm charts.

    inbharatai/claude-skills★ 41MITFolder: kubernetes-helper

  28. kubernetes security

    Kubernetes and container security skill for cluster hardening, RBAC review, admission control (OPA Gatekeeper, Kyverno), Pod Security Standards, network policies, secrets management, runtime defense (Falco, Tetragon), image supply chain (cosign, SLSA,…

    Garyson26/Trident-SecOps-Skills★ 38MITFolder: kubernetes-security

  29. k8s cilium troubleshooting

    Use when networking fails on a Kubernetes cluster that runs Cilium as its CNI: traffic between pods dropped or timing out after a CiliumNetworkPolicy or CiliumClusterwideNetworkPolicy, "Policy denied" drops in Hubble, DNS that stops resolving after an…

    k8s-servant/k8s-skills★ 31Apache-2.0Folder: k8s-cilium-troubleshooting

  30. k8s argocd troubleshooting

    Use when Argo CD does not deploy or update an application in Kubernetes: an Application that is OutOfSync, Unknown, Degraded, Missing or Progressing, a ComparisonError ("app path does not exist", "unable to resolve ... to a commit SHA"), an…

    k8s-servant/k8s-skills★ 31Apache-2.0Folder: k8s-argocd-troubleshooting

  31. k8s autoscaling troubleshooting

    Use when Kubernetes autoscaling does not scale as expected: a HorizontalPodAutoscaler whose TARGETS show "<unknown>", "missing request for cpu", "unable to get metrics for resource cpu" or "FailedGetResourceMetric", an HPA stuck at maxReplicas…

    k8s-servant/k8s-skills★ 31Apache-2.0Folder: k8s-autoscaling-troubleshooting

  32. infra containers kubernetes

    Kubernetes manifests, Helm charts, Kustomize overlays, and resource patterns

    agents-inc/skills★ 26MITFolder: infra-containers-kubernetes

  33. kubernetes health

    Check live Kubernetes cluster health with read-only diagnostics: nodes, pods, storage, networking, and GitOps.

    iuliandita/skills★ 10MITFolder: kubernetes-health

  34. aegisops ai

    Autonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.

    sickn33/agentic-awesome-skills★ 49kMITFolder: aegisops-ai

  35. gitops workflow

    Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continuous reconciliation. Use when implementing GitOps practices, automating Kubernetes deployments, or setting up declarative infrastructure management.

    wshobson/agents★ 42kMITFolder: gitops-workflow

  36. kubesphere gateway api

    KubeSphere Gateway API extension management Skill (Traefik based, uses Kubernetes Gateway API + GatewayProxy CRD gatewayapi.kubesphere.io/v1alpha1). This is the newer Kubernetes Gateway API standard. For the older Ingress API based gateway (ingress-nginx +…

    kubesphere/kubesphere★ 17kLicence: see repoFolder: kubesphere-gateway-api

  37. kubesphere gateway

    KubeSphere Gateway extension management Skill (ingress-nginx based, uses Kubernetes Ingress API + Gateway CRD gateway.kubesphere.io/v2alpha2). For the newer Kubernetes Gateway API (Traefik + GatewayProxy CRD), see the kubesphere-gateway-api skill instead.…

    kubesphere/kubesphere★ 17kLicence: see repoFolder: kubesphere-gateway

  38. devops engineer

    Creates Dockerfiles, configures CI/CD pipelines, writes Kubernetes manifests, and generates Terraform/Pulumi infrastructure templates. Handles deployment automation, GitOps configuration, incident response runbooks, and internal developer platform tooling.…

    Jeffallan/claude-skills★ 12kMITFolder: devops-engineer

  39. dump collect

    Configure and collect crash dumps for modern .NET applications. USE FOR: enabling automatic crash dumps for CoreCLR or NativeAOT, capturing dumps from running .NET processes, setting up dump collection in Docker or Kubernetes, using dotnet-dump collect or…

    dotnet/skills★ 5.8kMITFolder: dump-collect

  40. mirrord ci

    Help users set up mirrord in CI pipelines for testing against real Kubernetes environments. Use when users want to run end-to-end tests, integration tests, or automated tests in CI using mirrord to connect to staging/shared clusters.

    metalbear-co/mirrord★ 5.4kMITFolder: mirrord-ci

  41. mirrord config

    Helps users generate, edit, and validate mirrord.json configuration files for mirrord (MetalBear). Use when the user wants to connect their local process to a Kubernetes environment, configure features (env/fs/network), or needs feedback on an existing…

    metalbear-co/mirrord★ 5.4kMITFolder: mirrord-config

  42. mirrord kafka

    Helps DevOps engineers configure mirrord Operator's Kafka queue splitting feature end-to-end. Generates the MirrordSplitConfig and MirrordPropertyList Kubernetes CRD YAMLs (the current resources; MirrordKafkaTopicsConsumer + MirrordKafkaClientConfig are…

    metalbear-co/mirrord★ 5.4kMITFolder: mirrord-kafka

  43. cloud iam deep

    Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse…

    elementalsouls/Claude-BugHunter★ 5.3kMITFolder: cloud-iam-deep

  44. cdf defect image generation

    Generate synthetic PCB inspection images on Kubernetes with the SMT Defect Image Generation (DIG) DAG in CDF Orchestration. The DAG renders components in simulation, turns the renders into realistic golden images (sim2real), and uses AnomalyGen to add…

    NVIDIA/skills★ 3.8kApache-2.0Folder: cdf-defect-image-generation

  45. cdf event video generation

    Run the CDF Orchestration Event Video Generation DAG on Kubernetes or OSMO - image-to-video anomaly generation, auto-labeling, and anomaly dataset generation. Select for requests about event video generation, anomaly video generation, image-to-video…

    NVIDIA/skills★ 3.8kApache-2.0Folder: cdf-event-video-generation

  46. cdf image attribute augmentation

    Run the CDF Orchestration Image Attribute Augmentation DAG on Kubernetes - person-crop clothing augmentation, attribute search, and augmented dataset generation. Select for requests about image attribute augmentation, person attribute search, person…

    NVIDIA/skills★ 3.8kApache-2.0Folder: cdf-image-attribute-augmentation

  47. azure search nav

    Builds an Azure portal deep link to a specific blade/menu item for supported Microsoft.ContainerService, Microsoft.Kubernetes, and Microsoft.Compute resources using the aks-search-direct-mid semantic search API. WHEN: 'find where in the Azure portal to do…

    microsoft/skills★ 3.2kMITFolder: azure-search-nav

  48. aks troubleshooting

    Debug live Azure Kubernetes Service (AKS) incidents with a read-only, evidence-first investigation. WHEN: pod crashes or Pending, CrashLoopBackOff, OOMKilled, ImagePullBackOff, node NotReady, DNS or ingress failure, connectivity timeout, network policy,…

    microsoft/skills★ 3.2kMITFolder: aks-troubleshooting

  49. aks cost optimization

    Analyze advanced AKS cost efficiency. WHEN: \"AKS NAP readiness\", \"AKS bin packing\", \"AKS node scaling bottleneck\", \"AKS blocked scale-down\", \"AKS storage cost\". DO NOT USE AS DIRECT ENTRY FOR: overall AKS cost assessments or…

    microsoft/skills★ 3.2kMITFolder: aks-cost-optimization

  50. dstack

    dstack is an open-source control plane for GPU provisioning and orchestration across GPU clouds, Kubernetes, and on-prem clusters.

    dstackai/dstack★ 2.3kMPL-2.0Folder: dstack

Claude skills for Kubernetes: common questions

Which Claude skill should I use for Kubernetes?

There are 197 of them, spread over 76 repositories on GitHub. Named for it and most starred: k8s security policies (wshobson/agents, ★ 42k), k8s manifest generator (wshobson/agents, ★ 42k) and kubernetes specialist (Jeffallan/claude-skills, ★ 12k). Stars rate the repository a skill sits in, not the skill.

How do I install a Claude skill for Kubernetes?

For Kubernetes, take the k8s-security-policies folder from wshobson/agents (the folder that holds SKILL.md) into ~/.claude/skills/ to use it in every Claude Code project, or into .claude/skills/ for one project. In the Claude apps, zip that folder and upload it as a custom skill in settings.

Are these Kubernetes skills official?

No. None of the 197 Kubernetes skills comes from Anthropic's own skills repository, so all of them are community-made across 76 repositories.

Can I use these Kubernetes skills at work?

Of the 50 Kubernetes skills listed here, 46 sit in repositories under an open licence such as MIT or Apache 2.0, and every one states a licence. Check the licence file before you copy one into company work.

What should I check before installing a Kubernetes skill?

A Kubernetes skill is instructions Claude follows, and it can bundle scripts Claude runs, so read SKILL.md and every script first: for k8s security policies, that is everything in the k8s-security-policies folder. Red flags: piping a download into a shell, sending files to a URL, and instructions to hide what it does from you.

Are these Kubernetes skills maintained?

137 of the 197 Kubernetes skills sit in repositories that changed in the 30 days before 31 Oct 2026.

More topics: every “Claude skills for…” page.