Stats
Actions
Tags
From vanguard-frontier-agentic
Reviews Kubernetes Pod, Deployment, and StatefulSet specs for correctness, security posture, and production-readiness. Activates on requests to audit or validate workload manifests.
How this skill is triggered — by the user, by Claude, or both
Slash command
/vanguard-frontier-agentic:kubernetes-pod-spec-reviewThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Review Kubernetes Pod, Deployment, and StatefulSet specifications for probe correctness, resource QoS configuration, securityContext posture, image pull policy safety, secret consumption patterns, topology spread, and termination grace period alignment. Output a structured findings list with severity, evidence, and safe remediation steps — aligned with CKAD domain knowledge and production-readi...
Review Kubernetes Pod, Deployment, and StatefulSet specifications for probe correctness, resource QoS configuration, securityContext posture, image pull policy safety, secret consumption patterns, topology spread, and termination grace period alignment. Output a structured findings list with severity, evidence, and safe remediation steps — aligned with CKAD domain knowledge and production-readiness standards.
livenessProbe and readinessProbe; flag missing probes as HIGH for Deployments receiving traffic. Flag aggressive livenessProbe.failureThreshold (<=2) that kills pods during GC pauses.resources.requests and resources.limits; flag missing requests (unschedulable under pressure) as MEDIUM and flag CPU limits without requests as Burstable QoS risk.securityContext at both pod level (runAsNonRoot, seccompProfile) and container level (allowPrivilegeEscalation: false, readOnlyRootFilesystem: true, capabilities.drop: [ALL]).latest image tag combined with imagePullPolicy: IfNotPresent as HIGH — image is never refreshed after first pull.envFrom.secretRef (bulk-mount exposes all keys) as MEDIUM; recommend volume mounts or specific env.valueFrom.secretKeyRef.topologySpreadConstraints for multi-replica Deployments; flag absence as MEDIUM (single AZ failure = full outage).terminationGracePeriodSeconds against application drain time; flag default 30s for gRPC or database workloads as MEDIUM.Load these only when needed:
spec.containers[0].livenessProbe)npx claudepluginhub raishin/vanguard-frontier-agentic --plugin vanguard-frontier-agenticReviews Kubernetes YAML manifests for quality, security, and policy compliance defects. Covers Deployments, StatefulSets, Services, Ingress, NetworkPolicy, RBAC, and CRDs.
Audits container images, Dockerfiles, Helm charts, Kustomize overlays, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks.
Provides quick Kubernetes reference for manifests (Pods, Deployments, Services), security hardening, RBAC, kubectl commands, and troubleshooting. Activates on Kubernetes YAML files.