agentmods.dev

ksail

ksail is a skill for Claude Code from devantler-tech/agent-plugins. It costs 97 tokens per session (1,215 once invoked), scanned A, original, Apache-2.0.

A command-line tool for creating and managing Kubernetes clusters, which are groups of machines that run containerized applications. It supports local clusters and cloud EKS clusters, plus Flux and Argo CD GitOps setup, where configuration in a repository controls deployments.

In plain words
What is it for?
Use it to create, start, update, or delete clusters; scaffold Kubernetes projects; and bootstrap GitOps workloads and multi-tenant setups.
Why use it?
It brings several Kubernetes tools into one workflow instead of requiring separate commands and setup steps. It also describes the credentials and tools needed for local or cloud use.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the ksail plugin — 1 skill shipped together

not rated 2repo yesterday A scan 97 tokens original Apache-2.0

Good fit Use it to create, start, update, or delete clusters; scaffold Kubernetes projects; and bootstrap GitOps workloads and multi-tenant setups.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/devantler-tech/agent-plugins/ksail
View source ↗ devantler-tech/agent-plugins
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add devantler-tech/agent-plugins --skill ksail
Clone the repo
git clone --depth 1 https://github.com/devantler-tech/agent-plugins

Made for: Claude Code.

Or install ksail, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ksail

README.md
[![agentmods](https://agentmods.dev/badge/skills/devantler-tech/agent-plugins/ksail/github.svg)](https://agentmods.dev/skills/devantler-tech/agent-plugins/ksail)
Your own site
<a href="https://agentmods.dev/skills/devantler-tech/agent-plugins/ksail"><img src="https://agentmods.dev/badge/skills/devantler-tech/agent-plugins/ksail/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ksail

Your own site · 80×15
<a href="https://agentmods.dev/skills/devantler-tech/agent-plugins/ksail"><img src="https://agentmods.dev/badge/skills/devantler-tech/agent-plugins/ksail.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 97 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,215 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00097 $0.01215
Opus 5.5 $0.00039 $0.00486
Sonnet 5.5 $0.00019 $0.00243
Haiku 4.5 $0.00010 $0.00121

Measured 28d ago against content hash 906da3fbdb87, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ksail scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/ksail/skills/ksail/SKILL.md · 66 lines

How it starts

The opening of the file, as written. The whole thing — 66 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ksail

KSail bundles common Kubernetes tooling (kubectl, helm, kind, k3d, vcluster, flux, argocd, …) into a single Go binary. Local clusters need only Docker; cloud providers also need that provider's credentials, and EKS additionally needs the eksctl CLI.

Full docs: https://ksail.devantler.tech. Treat the docs site and ksail <command> --help as the source of truth; do not paraphrase flag semantics — link users to the relevant page instead.

Prerequisites

  • ksail on PATH (see https://ksail.devantler.tech/installation/)
  • Docker daemon running (required for the local Docker provider)
  • Cloud credentials only when using non-Docker providers (HCLOUD_TOKEN for Hetzner, OMNI_SERVICE_ACCOUNT_KEY for Omni, standard AWS SDK credentials such as aws configure or AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY/AWS_REGION for AWS)
  • eksctl on PATH for the EKS distribution (see https://ksail.devantler.tech/distributions/eks/)

When to use this skill

Invoke when the user asks to:

  • Create, start, stop, update, or delete a local Kubernetes cluster
  • Scaffold a KSail project (ksail.yaml, native distribution config, k8s/ kustomization)
  • Bootstrap Flux or ArgoCD on a local cluster
  • Back up or restore cluster resources
  • Apply, generate, validate, or watch Kubernetes workloads
  • Export/import container images for air-gapped clusters
  • Manage SOPS-encrypted secrets via ksail workload cipher
  • Work with the ksail MCP server or AI chat TUI

Command groups (source of truth: ksail --help)

  • ksail cluster … — lifecycle: init, create, update, diff, delete, start, stop, info, list, connect, switch, backup, restore, oidc (OIDC authentication: get-token)
  • ksail workload … — apply, create, edit, get, describe, explain, delete, logs, exec, expose, gen, validate, install, scale, rollout, scan, wait, images, export, import, watch, push, reconcile, and cipher (SOPS-based secret management: encrypt, decrypt, edit, import, rotate)
  • ksail tenant … — multi-tenancy: create, delete
  • ksail open … — interfaces: web (browser UI), desktop (native app), chat (AI chat TUI powered by GitHub Copilot), mcp (MCP server — already auto-registered by this plugin)

Read the full file on GitHub · 66 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 28d ago First seen · 66 lines · 97 tokens per session scan A 906da3fbdb87

Subscribe to this mod's changes

ksail is a skill published in the GitHub repository devantler-tech/agent-plugins (2 stars, last pushed yesterday), licensed Apache-2.0. It adds 97 tokens to every session and 1,215 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-19.

Claude CodeCloudContainersDevOps and cloudagent-pluginsagent-skillsai-agentsclaude-code-marketplaceclaude-code-plugin
Related

Other skills, from other repositories

k8s-manifest-validation

This skill should be used when the user mentions "kubernetes manifest", "k8s yaml", "deployment not ready", "pod crashloop", "resource limits", "liveness readiness probe", "securityContext", or "helm values", or is validating manifests before deploy. It provides the silent failure modes of K8s manifests plus a…

sigistry/marketplace · 84 tokens

helm

Helm chart authoring, templating, and release management for Kubernetes: charts, values, templating functions, repositories, dependencies, and lifecycle operations.

lukaskellerstein/claude-my-marketplace · 0 tokens

relay-deploy

Set up a complete deployment configuration — Dockerfile, deployment manifest, environment config, and rollback procedure. Use when asked about "deployment setup", "how do I deploy this", "deployment strategy", or "rollback plan".

tonone-ai/tonone · 48 tokens

runtime-security

Detect and respond to in-container threats at the syscall level using Falco (eBPF-based, CNCF, open-source, no license cost). Covers Falco installation on EKS/GKE with eBPF driver, custom rule authoring, alert routing via Falcosidekick, rule debugging, and bridging Falco runtime signals to Kyverno admission…

nitinjain999/platform-skills · 121 tokens

infrastructure-validation

Validates infrastructure-as-code with tool chains and checks for common mistakes. Use when working with Terraform (.tf, .tfvars), Ansible (playbooks, roles, inventory), Docker (Dockerfile, docker-compose.yml), Kubernetes (manifests, Helm charts), or CloudFormation. Also use when running terraform plan/apply, building…

lgbarn/shipyard · 94 tokens

deploy-mcp

Deploy the FutureSearch MCP server to staging or production on GKE. Use when the user wants to deploy, redeploy, roll back, scale replicas, or check deployment status. Triggers on deploy, redeploy, staging, production, rollout, scale, replicas.

futuresearch/futuresearch-python · 58 tokens