Claude skills for Kubernetes
The 50 strongest of 197 Kubernetes skills on GitHub. Skills built for Kubernetes come first; no repository gets more than 3 spots. Each links to its folder; copy it into ~/.claude/skills/ to use it.
k8s security policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
wshobson/agents★ 42kMITFolder:
k8s-security-policiesk8s manifest generator
Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade…
wshobson/agents★ 42kMITFolder:
k8s-manifest-generatorkubernetes specialist
Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service accounts, define network isolation rules, debug pod crashes, analyze resource limits, inspect container logs, or…
Jeffallan/claude-skills★ 12kMITFolder:
kubernetes-specialistoffensive k8s attacks
Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-k8s-attackshunt k8s
Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape,…
elementalsouls/Claude-BugHunter★ 5.3kMITFolder:
hunt-k8sazure kubernetes
Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations…
microsoft/azure-skills★ 1.6kMITFolder:
azure-kubernetesazure kubernetes app deploy
Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with…
microsoft/azure-skills★ 1.6kMITFolder:
azure-kubernetes-app-deployazure kubernetes automatic readiness
Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness,…
microsoft/azure-skills★ 1.6kMITFolder:
azure-kubernetes-automatic-readinesskubernetes ops
Deploy, scale, and manage Kubernetes workloads. Create deployments, services, and configurations, manage cluster resources, troubleshoot pods, and implement production-ready Kubernetes patterns. Use when working with Kubernetes clusters, K8s deployments,…
BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder:
kubernetes-opsmodel serving kubernetes
Deploy ML models on Kubernetes with KServe (formerly KFServing) and NVIDIA Triton Inference Server. Includes canary deployments, autoscaling, model versioning, A/B testing, and GPU resource management for production model serving.
BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder:
model-serving-kubernetesgpu kubernetes operations
Operate GPU-backed Kubernetes clusters for AI inference and training with scheduling, autoscaling, node health, MIG partitioning, and cost controls.
BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder:
gpu-kubernetes-operationskubernetes operator
Design, build, and operate Kubernetes operators. Use when extending Kubernetes with a custom controller, choosing a framework, designing CRDs, implementing reconciliation loops, or auditing an operator for anti-patterns.
borghei/Claude-Skills★ 1kLicence: see repoFolder:
kubernetes-operatorazure kubernetes service
Expert knowledge for Azure Kubernetes Service (AKS) development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when…
MicrosoftDocs/Agent-Skills★ 797CC-BY-4.0Folder:
azure-kubernetes-servicekubernetes patterns
Pod design patterns, sidecar containers, init containers, config management, rolling updates, and resource limits.
vibeeval/vibecosystem★ 541MITFolder:
kubernetes-patternsoperating kubernetes
Operating production Kubernetes clusters effectively with resource management, advanced scheduling, networking, storage, security hardening, and autoscaling. Use when deploying workloads to Kubernetes, configuring cluster resources, implementing security…
ancoleman/ai-design-components★ 525MITFolder:
operating-kuberneteskubernetes skill
Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating…
LukasNiessen/kubernetes-skill★ 468MITFolder:
kubernetes-skillkubernetes
Kubernetes operations: debugging, security, RBAC, and infrastructure tooling.
notque/vexjoy-agent★ 443MITFolder:
kubernetescontainer k8s escape
Use when breaking out of a container or escalating inside Kubernetes — runc/BuildKit CVEs, privileged/capability/cgroup misconfig escapes, NVIDIA GPU toolkit escape, K8s RBAC abuse, kubelet RCE, ingress/admission-controller RCE, node-to-cluster pivot
hypnguyen1209/offensive-claude★ 403MITFolder:
container-k8s-escapeKubernetes Chaos Testing
Chaos testing for Kubernetes workloads using Chaos Mesh, Litmus, and custom fault injection for pod, network, and disk failures.
PramodDutta/qaskills★ 244MITFolder:
chaos-testing-kuberneteskubernetes deployment
Deploy, manage, and scale applications on Kubernetes clusters using manifests, Helm charts, and autoscaling configurations. Use when the user requests kubernetes deployment or provides relevant inputs for this workflow.
seb1n/awesome-ai-agent-skills★ 233MITFolder:
kubernetes-deploymentdt obs kubernetes
Kubernetes cluster, pod, node, and workload monitoring. Use when analyzing K8s health, resource optimization, pod failures, OOMKills, scheduling, or security posture. Also use for Kubernetes operational events like pod restarts, OOM events, evictions, and…
Dynatrace/dynatrace-for-ai★ 171Apache-2.0Folder:
dt-obs-kuberneteskubernetes docs
Draft, rewrite, or audit Kubernetes and cloud-native documentation using an independently expressed interpretation of Kubernetes documentation style. Use for concepts, tasks, tutorials, references, configuration, operations, and version-sensitive guidance…
Neeeophytee/agent-stylebooks★ 78MITFolder:
kubernetes-docskubernetes architect
Designs Kubernetes deployments, services, ingress, RBAC, Helm charts, and cluster architecture. Use when working with Kubernetes YAML files or when the user mentions Kubernetes, K8s, Helm, or container orchestration.
tranhieutt/software_development_department★ 74MITFolder:
kubernetes-architectkubernetes deployment patterns
Kubernetes deployment strategies and workload patterns for production-grade applications. Use when deploying to Kubernetes, implementing rollout strategies, or designing cloud-native application architectures.
NickCrew/Claude-Cortex★ 62MITFolder:
kubernetes-deployment-patternskubernetes security policies
Kubernetes security policies, RBAC, and Pod Security Standards for hardened cluster deployments. Use when implementing cluster security, defining network policies, or enforcing security compliance in Kubernetes environments.
NickCrew/Claude-Cortex★ 62MITFolder:
kubernetes-security-policiesk8s
Kubernetes and container exploitation: identity/RBAC, secrets, kubelet/etcd, managed-cloud workload identities, container-to-node escape including CVE-2026-31431 Copy Fail, and Kubernetes-native persistence. Use when already in a Pod/container or holding…
pale-knight/redteam-skill★ 51MITFolder:
k8skubernetes helper
Author Kubernetes manifests — Deployments, Services, Ingress, ConfigMaps, Secrets, HPA, and Helm charts.
inbharatai/claude-skills★ 41MITFolder:
kubernetes-helperkubernetes security
Kubernetes and container security skill for cluster hardening, RBAC review, admission control (OPA Gatekeeper, Kyverno), Pod Security Standards, network policies, secrets management, runtime defense (Falco, Tetragon), image supply chain (cosign, SLSA,…
Garyson26/Trident-SecOps-Skills★ 38MITFolder:
kubernetes-securityk8s cilium troubleshooting
Use when networking fails on a Kubernetes cluster that runs Cilium as its CNI: traffic between pods dropped or timing out after a CiliumNetworkPolicy or CiliumClusterwideNetworkPolicy, "Policy denied" drops in Hubble, DNS that stops resolving after an…
k8s-servant/k8s-skills★ 31Apache-2.0Folder:
k8s-cilium-troubleshootingk8s argocd troubleshooting
Use when Argo CD does not deploy or update an application in Kubernetes: an Application that is OutOfSync, Unknown, Degraded, Missing or Progressing, a ComparisonError ("app path does not exist", "unable to resolve ... to a commit SHA"), an…
k8s-servant/k8s-skills★ 31Apache-2.0Folder:
k8s-argocd-troubleshootingk8s autoscaling troubleshooting
Use when Kubernetes autoscaling does not scale as expected: a HorizontalPodAutoscaler whose TARGETS show "<unknown>", "missing request for cpu", "unable to get metrics for resource cpu" or "FailedGetResourceMetric", an HPA stuck at maxReplicas…
k8s-servant/k8s-skills★ 31Apache-2.0Folder:
k8s-autoscaling-troubleshootinginfra containers kubernetes
Kubernetes manifests, Helm charts, Kustomize overlays, and resource patterns
agents-inc/skills★ 26MITFolder:
infra-containers-kuberneteskubernetes health
Check live Kubernetes cluster health with read-only diagnostics: nodes, pods, storage, networking, and GitOps.
iuliandita/skills★ 10MITFolder:
kubernetes-healthaegisops ai
Autonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.
sickn33/agentic-awesome-skills★ 49kMITFolder:
aegisops-aigitops workflow
Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continuous reconciliation. Use when implementing GitOps practices, automating Kubernetes deployments, or setting up declarative infrastructure management.
wshobson/agents★ 42kMITFolder:
gitops-workflowkubesphere gateway api
KubeSphere Gateway API extension management Skill (Traefik based, uses Kubernetes Gateway API + GatewayProxy CRD gatewayapi.kubesphere.io/v1alpha1). This is the newer Kubernetes Gateway API standard. For the older Ingress API based gateway (ingress-nginx +…
kubesphere/kubesphere★ 17kLicence: see repoFolder:
kubesphere-gateway-apikubesphere gateway
KubeSphere Gateway extension management Skill (ingress-nginx based, uses Kubernetes Ingress API + Gateway CRD gateway.kubesphere.io/v2alpha2). For the newer Kubernetes Gateway API (Traefik + GatewayProxy CRD), see the kubesphere-gateway-api skill instead.…
kubesphere/kubesphere★ 17kLicence: see repoFolder:
kubesphere-gatewaydevops engineer
Creates Dockerfiles, configures CI/CD pipelines, writes Kubernetes manifests, and generates Terraform/Pulumi infrastructure templates. Handles deployment automation, GitOps configuration, incident response runbooks, and internal developer platform tooling.…
Jeffallan/claude-skills★ 12kMITFolder:
devops-engineerdump collect
Configure and collect crash dumps for modern .NET applications. USE FOR: enabling automatic crash dumps for CoreCLR or NativeAOT, capturing dumps from running .NET processes, setting up dump collection in Docker or Kubernetes, using dotnet-dump collect or…
dotnet/skills★ 5.8kMITFolder:
dump-collectmirrord ci
Help users set up mirrord in CI pipelines for testing against real Kubernetes environments. Use when users want to run end-to-end tests, integration tests, or automated tests in CI using mirrord to connect to staging/shared clusters.
metalbear-co/mirrord★ 5.4kMITFolder:
mirrord-cimirrord config
Helps users generate, edit, and validate mirrord.json configuration files for mirrord (MetalBear). Use when the user wants to connect their local process to a Kubernetes environment, configure features (env/fs/network), or needs feedback on an existing…
metalbear-co/mirrord★ 5.4kMITFolder:
mirrord-configmirrord kafka
Helps DevOps engineers configure mirrord Operator's Kafka queue splitting feature end-to-end. Generates the MirrordSplitConfig and MirrordPropertyList Kubernetes CRD YAMLs (the current resources; MirrordKafkaTopicsConsumer + MirrordKafkaClientConfig are…
metalbear-co/mirrord★ 5.4kMITFolder:
mirrord-kafkacloud iam deep
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege analysis. Covers IAM enumeration (aws iam, az role, gcloud iam), STS/AssumeRole chaining, Azure Managed Identity abuse…
elementalsouls/Claude-BugHunter★ 5.3kMITFolder:
cloud-iam-deepcdf defect image generation
Generate synthetic PCB inspection images on Kubernetes with the SMT Defect Image Generation (DIG) DAG in CDF Orchestration. The DAG renders components in simulation, turns the renders into realistic golden images (sim2real), and uses AnomalyGen to add…
NVIDIA/skills★ 3.8kApache-2.0Folder:
cdf-defect-image-generationcdf event video generation
Run the CDF Orchestration Event Video Generation DAG on Kubernetes or OSMO - image-to-video anomaly generation, auto-labeling, and anomaly dataset generation. Select for requests about event video generation, anomaly video generation, image-to-video…
NVIDIA/skills★ 3.8kApache-2.0Folder:
cdf-event-video-generationcdf image attribute augmentation
Run the CDF Orchestration Image Attribute Augmentation DAG on Kubernetes - person-crop clothing augmentation, attribute search, and augmented dataset generation. Select for requests about image attribute augmentation, person attribute search, person…
NVIDIA/skills★ 3.8kApache-2.0Folder:
cdf-image-attribute-augmentationazure search nav
Builds an Azure portal deep link to a specific blade/menu item for supported Microsoft.ContainerService, Microsoft.Kubernetes, and Microsoft.Compute resources using the aks-search-direct-mid semantic search API. WHEN: 'find where in the Azure portal to do…
microsoft/skills★ 3.2kMITFolder:
azure-search-navaks troubleshooting
Debug live Azure Kubernetes Service (AKS) incidents with a read-only, evidence-first investigation. WHEN: pod crashes or Pending, CrashLoopBackOff, OOMKilled, ImagePullBackOff, node NotReady, DNS or ingress failure, connectivity timeout, network policy,…
microsoft/skills★ 3.2kMITFolder:
aks-troubleshootingaks cost optimization
Analyze advanced AKS cost efficiency. WHEN: \"AKS NAP readiness\", \"AKS bin packing\", \"AKS node scaling bottleneck\", \"AKS blocked scale-down\", \"AKS storage cost\". DO NOT USE AS DIRECT ENTRY FOR: overall AKS cost assessments or…
microsoft/skills★ 3.2kMITFolder:
aks-cost-optimizationdstack
dstack is an open-source control plane for GPU provisioning and orchestration across GPU clouds, Kubernetes, and on-prem clusters.
dstackai/dstack★ 2.3kMPL-2.0Folder:
dstack
Claude skills for Kubernetes: common questions
Which Claude skill should I use for Kubernetes?
There are 197 of them, spread over 76 repositories on GitHub. Named for it and most starred: k8s security policies (wshobson/agents, ★ 42k), k8s manifest generator (wshobson/agents, ★ 42k) and kubernetes specialist (Jeffallan/claude-skills, ★ 12k). Stars rate the repository a skill sits in, not the skill.
How do I install a Claude skill for Kubernetes?
For Kubernetes, take the k8s-security-policies folder from wshobson/agents (the folder that holds SKILL.md) into ~/.claude/skills/ to use it in every Claude Code project, or into .claude/skills/ for one project. In the Claude apps, zip that folder and upload it as a custom skill in settings.
Are these Kubernetes skills official?
No. None of the 197 Kubernetes skills comes from Anthropic's own skills repository, so all of them are community-made across 76 repositories.
Can I use these Kubernetes skills at work?
Of the 50 Kubernetes skills listed here, 46 sit in repositories under an open licence such as MIT or Apache 2.0, and every one states a licence. Check the licence file before you copy one into company work.
What should I check before installing a Kubernetes skill?
A Kubernetes skill is instructions Claude follows, and it can bundle scripts Claude runs, so read SKILL.md and every script first: for k8s security policies, that is everything in the k8s-security-policies folder. Red flags: piping a download into a shell, sending files to a URL, and instructions to hide what it does from you.
Are these Kubernetes skills maintained?
137 of the 197 Kubernetes skills sit in repositories that changed in the 30 days before 31 Oct 2026.
More topics: every “Claude skills for…” page.