kubectl

Execute and manage Kubernetes clusters via kubectl commands. Query resources, deploy applications, debug containers, manage configurations, and monitor cluster health. Use when working with Kubernetes clusters, containers, deployments, or pod diagnostics.

Install only if you intend to let the agent assist with Kubernetes administration. Before running commands, verify the active kubectl context and namespace, use least-privilege kubeconfig credentials, prefer dry-run modes, and require explicit approval for production changes, delete, drain, exec, cp, rollout, or config-view operations.

Type: OpenClaw Skill Name: kubectl Version: 1.0.0 The skill bundle is classified as suspicious due to the inherent high-risk capabilities of the `kubectl` command-line tool, which it fully exposes. While the code and documentation (SKILL.md, references/REFERENCE.md, and scripts/*.sh) are transparent and align with the stated purpose of Kubernetes cluster management, they enable powerful actions such as arbitrary command execution within pods (`kubectl exec`), viewing sensitive cluster configurations (`kubectl config view`), and transferring files to/from pods (`kubectl cp`). These capabilities, though plausibly needed for the skill's function, grant broad access and control over a Kubernetes cluster, posing a significant risk if the agent or user is compromised, even without explicit evidence of intentional malicious behavior like data exfiltration to external endpoints or prompt injection attempts to subvert the agent's core directives.