lucas-runbook

lucas-runbook is a skill for Claude Code from a2wio/lucas. It costs 38 tokens per session (501 once invoked), scanned A, original, MIT.

A Kubernetes troubleshooting guide that requires approved runbooks before diagnosing or changing a running application. Kubernetes is a system for running containers across machines.

In plain words
What is it for?
Use it when investigating failed, crashing, restarting, out-of-memory, or image-download-failing Kubernetes pods.
Why use it?
It prevents unapproved fixes and gives you a defined procedure to follow; if no matching runbook exists, it tells you to stop and ask how to proceed.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Good fit Use it when investigating failed, crashing, restarting, out-of-memory, or image-download-failing Kubernetes pods.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/a2wio/lucas/lucas-runbook
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add a2wio/lucas --skill lucas-runbook
Clone the repo
git clone --depth 1 https://github.com/a2wio/lucas

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for lucas-runbook

README.md
[![agentmods](https://agentmods.dev/badge/skills/a2wio/lucas/lucas-runbook/github.svg)](https://agentmods.dev/skills/a2wio/lucas/lucas-runbook)
Your own site
<a href="https://agentmods.dev/skills/a2wio/lucas/lucas-runbook"><img src="https://agentmods.dev/badge/skills/a2wio/lucas/lucas-runbook/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for lucas-runbook

Your own site · 80×15
<a href="https://agentmods.dev/skills/a2wio/lucas/lucas-runbook"><img src="https://agentmods.dev/badge/skills/a2wio/lucas/lucas-runbook.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 38 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 501 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00038 $0.00501
Opus 5 $0.00019 $0.00251
Sonnet 5 $0.00008 $0.00100
Haiku 4.5 $0.00004 $0.00050

Measured 10d ago against content hash ba7cc2ac8205, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

lucas-runbook scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

src/agent/.claude/skills/lucas-runbook/SKILL.md · 65 lines

What it actually says

Lucas Runbook-Driven Troubleshooting

You are operating in runbook-driven mode. Before taking any remediation action, you MUST search for and follow approved runbooks.

Runbook Sources

Search these locations for runbooks:

Local Runbooks

  • Path: /runbooks
  • Search using: Glob pattern="**/*.md" path="/runbooks"
  • Read matching files to find relevant procedures

External Documentation (if configured)

  • Check environment or config for external URLs
  • Use WebFetch to retrieve external runbook content

Procedure

When you identify a Kubernetes issue:

  1. Identify the error type (OOMKilled, CrashLoopBackOff, ImagePullBackOff, etc.)

  2. Search for matching runbook:

    Glob pattern="**/*oom*.md" path="/runbooks"
    Glob pattern="**/*crash*.md" path="/runbooks"
    Glob pattern="**/*image*.md" path="/runbooks"
    
  3. Read the runbook if found

  4. Follow the runbook EXACTLY:

    • Use only the approved diagnostic commands
    • Apply only the approved fixes
    • Escalate when the runbook says to escalate
  5. If NO runbook found:

    • Do NOT attempt fixes
    • Report what you observed
    • Ask: "No runbook found for this issue. How should I proceed?"

Important Rules

  • ALWAYS cite which runbook you're following
  • NEVER improvise fixes outside of runbooks
  • If a runbook says "escalate", do NOT attempt the fix yourself
  • Document what you did and the outcome

Example

When you see OOMKilled:

  1. Search: Glob pattern="**/*oom*.md" path="/runbooks"
  2. Find: oom-killed.md
  3. Read: The runbook says to increase memory limits
  4. Say: "Following runbook oom-killed.md: Increasing memory limit from 256Mi to 512Mi"
  5. Execute the approved fix
  6. Verify and report outcome
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 65 lines · 38 tokens per session scan A ba7cc2ac8205

Subscribe to this mod's changes

lucas-runbook is a skill published in the GitHub repository a2wio/lucas (362 stars, last pushed 3mo ago), licensed MIT. It adds 38 tokens to every session and 501 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

networkpolicy-debug

Diagnose NetworkPolicy-related connectivity issues (traffic unexpectedly blocked, default-deny effects, egress blocking DNS). Identifies which NetworkPolicies affect a pod, checks ingress/egress rules, and verifies CNI support.

scitix/siclaw · 48 tokens

node-logs

Retrieve logs from a Kubernetes node — systemd units (journalctl) or files under /var/log. Use when you need node-level evidence: containerd, kubelet, kernel/OOM, or anything the pod's own log cannot show. Three access paths in order: hostscript (SSH), nodescript (debug pod), and localscript against the kubelet log…

scitix/siclaw · 84 tokens

statefulset-debug

Diagnose StatefulSet rollout and scaling failures (ordered update stuck, OnDelete not updating, partition misconfiguration, PVC binding deadlocks). Checks update strategy, pod ordinal progression, PVC bindings, and ordered startup to identify why a StatefulSet is not progressing.

scitix/siclaw · 56 tokens

volcano-gang-scheduling

Gang Scheduling diagnostic guide for Volcano. Use when PodGroup cannot schedule completely, member Pods remain Pending, or minAvailable/minMember constraints are not satisfied.

scitix/siclaw · 37 tokens

volcano-resource-insufficient

Resource shortage diagnostic guide for Volcano. Use when seeing Insufficient cpu/memory events, OOMKilled pods, or nodes with zero allocatable resources.

scitix/siclaw · 36 tokens

image-pull-debug

Diagnose container image pull failures (ErrImagePull / ImagePullBackOff). Checks pod status, containerd logs, and events to identify root cause.

scitix/siclaw · 36 tokens