KubeShark Kubernetes Skill

A community Agent Skill by Lukas Niessen, called KubeShark, that keeps your agent from making the usual Kubernetes mistakes: missing security contexts, deprecated APIs, wildcard RBAC, forgotten resource limits and probes that cause cascading failures. Instead of a long reference dump, it walks the agent through a diagnose-first workflow and loads only the guidance the task needs. It draws on the official Kubernetes docs, the NSA/CISA Kubernetes Hardening Guide, the OWASP Kubernetes Top 10, the CIS benchmarks and the Pod Security Standards. What you can do with it - Write Deployments, StatefulSets, Jobs, CronJobs and DaemonSets with secure, production-ready defaults - Review manifests for security issues and add RBAC, NetworkPolicies and resource limits - Build Helm charts and Kustomize overlays - Catch deprecated or removed APIs, with Kubernetes 1.25 as the baseline - Check that labels, selectors and ports line up across resources - Add policy checks with Kyverno, OPA/Gatekeeper and kubeconform How it works - Seven steps: capture the context, diagnose the likely failure modes, load only the matching references, propose a fix with risk controls, generate the YAML, validate it, and deliver it with assumptions, tradeoffs and rollback notes. - Six failure modes guide the review: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts and API drift. - Extra guidance loads only when the task mentions EKS, GKE, AKS or OpenShift, a GitOps controller such as Argo CD or Flux, or an observability stack such as Prometheus, OpenTelemetry or Loki. - Install it with npx skills add, by cloning it into your skills folder, or from the maker's own Claude Code plugin marketplace. Good to know - It has no tools of its own. It writes and reviews YAML, and gives you validation commands such as kubectl dry-runs and kubeconform to run. - It covers vanilla Kubernetes, EKS, GKE, AKS, OpenShift, k3s and other distributions. - A community project under the MIT license.

• “Create a production-ready Deployment with an Ingress and autoscaling”

  Copy

• “Review my Deployment for security issues and add proper RBAC, NetworkPolicies, and resource limits”

  Copy

• “Review my deployment.yaml for security issues”

  Copy

• “Create a Helm chart for a PostgreSQL StatefulSet with backup CronJobs”

  Copy

• “Check these manifests for deprecated APIs before we upgrade the cluster”

  Copy

• “Set this up for EKS with IRSA and the AWS Load Balancer Controller”