← 返回 Skills 市场
cn-big-cabbage

k8s-ops

作者 CN-big-cabbage · GitHub ↗ · v2.1.0 · MIT-0
cross-platform ⚠ suspicious
125
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install k8s-ops
功能描述
Kubernetes operations plugin — 32 tools for cluster management, monitoring, troubleshooting, and security auditing
使用说明 (SKILL.md)

k8s-ops

Kubernetes operations plugin for OpenClaw. Provides 32 tools covering the full lifecycle of K8s cluster management.

Tools

  • Pod Management: list, inspect, exec, logs, port-forward
  • Deployments: status, rollout, scale, restart
  • Services & Networking: services, ingress, gateway, network policies
  • Workloads: jobs, cronjobs, daemonsets, statefulsets, HPA
  • Storage: PV/PVC management
  • Security: RBAC audit, security scanning, pod security policies
  • Observability: events, metrics, health checks, cost analysis
  • Troubleshooting: diagnostics, topology, event analysis
  • Advanced: CRDs, Helm releases, PDB, YAML generation, namespace management

Requirements

  • kubectl installed and configured with cluster access
  • Valid kubeconfig (defaults to ~/.kube/config)

Configuration

Optional plugin config:

Field Description
kubeconfigPath Custom path to kubeconfig file
defaultContext Default Kubernetes context to use
hosts SSH target hosts for sys-monitor tool
安全使用建议
This plugin claims to be a Kubernetes toolbox and that part is plausible, but the actual tool implementations are imported from @k8s-ops/core which is not included or linked to a homepage — you cannot audit the code that will run. The plugin will read your kubeconfig (~/.kube/config) and can accept SSH credentials (password or privateKeyPath) via its config, which gives it access to sensitive cluster and host credentials. Before installing: 1) ask the publisher for the source/homepage and the full @k8s-ops/core package so you can review the handlers; 2) avoid supplying real kubeconfigs or private keys until you audit the code; 3) run the plugin in an isolated environment or with least-privilege kubeconfig (read-only, limited namespaces) if you must test; 4) prefer plugins with transparent provenance (public repo, reproducible builds). If the author cannot provide the core package/source, treat this as untrusted.
能力标签
cryptorequires-wallet
能力评估
Purpose & Capability
Name/description, SKILL.md, and the code all claim Kubernetes management and require kubectl/kubeconfig — that is coherent. However the package delegates all tool handlers to @k8s-ops/core (skillRegistry), which is not present in the published files; the plugin also exposes an SSH-related hosts config (password/privateKeyPath) not mentioned in the high-level requirements. These are plausible features for a K8s ops tool but increase the trust surface.
Instruction Scope
SKILL.md only instructs using kubectl and kubeconfig (default ~/.kube/config) which is expected. But the actual handlers are loaded from @k8s-ops/core (skillRegistry) — the SKILL.md does not include the implementation of those 32 tools. Because the runtime handlers are external, we cannot confirm they stay within the stated scope (they could read other files, make network calls, or transmit cluster/SSH credentials).
Install Mechanism
No install spec (instruction-only) reduces install-time risk. However package.json depends on "@k8s-ops/core": "workspace:*" which indicates the real logic lives in a workspace package that is not included here; this unresolved dependency is a supply-chain risk (the core package determines runtime behavior).
Credentials
The skill declares no required env vars but expects a kubeconfig (defaults to ~/.kube/config) and offers optional SSH credentials/privateKeyPath in its config schema. Reading the user's kubeconfig and optionally SSH private keys accesses very sensitive secrets. Those credential accesses are not declared as required environment/config paths in the metadata — a mismatch that increases risk.
Persistence & Privilege
always is false and there is no indication the plugin demands permanent privileged presence or modifies other skills. It registers tools and runs when invoked. Autonomous invocation is allowed by platform default; that combination is not by itself flagged.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install k8s-ops
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /k8s-ops 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.0
feat: add new tools
v2.0.0
Initial monorepo release with 32 Kubernetes management tools
元数据
Slug k8s-ops
版本 2.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

k8s-ops 是什么?

Kubernetes operations plugin — 32 tools for cluster management, monitoring, troubleshooting, and security auditing. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 125 次。

如何安装 k8s-ops?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install k8s-ops」即可一键安装,无需额外配置。

k8s-ops 是免费的吗?

是的,k8s-ops 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

k8s-ops 支持哪些平台?

k8s-ops 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 k8s-ops?

由 CN-big-cabbage(@cn-big-cabbage)开发并维护,当前版本 v2.1.0。

💬 留言讨论