Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add G1Joshi/Agent-Skills --skill openshiftgit clone --depth 1 https://github.com/G1Joshi/Agent-SkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/g1joshi/agent-skills/openshift)<a href="https://agentmods.dev/skills/g1joshi/agent-skills/openshift"><img src="https://agentmods.dev/badge/skills/g1joshi/agent-skills/openshift/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/g1joshi/agent-skills/openshift"><img src="https://agentmods.dev/badge/skills/g1joshi/agent-skills/openshift.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.01112 |
| Opus 5.5 | $0.00016 | $0.00445 |
| Sonnet 5.5 | $0.00008 | $0.00222 |
| Haiku 4.5 | $0.00004 | $0.00111 |
Grade A, and why
openshift scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 29d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootlowPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
| `CrashLoopBackOff: container cannot run as root (SCC violation)` | OpenShift default `restricted-v2` SCC prevents root container execution. | Build container image with non-root user (`USER 1001`) or assign custom SCC. Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 164 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenShift
Red Hat OpenShift is an enterprise Kubernetes platform offering full-stack automated operations, integrated developer tooling, and OpenShift Virtualization for co-locating VMs and containers.
When to Use
- Enterprise Kubernetes Distribution: Red Hat OpenShift providing turnkey security, developer tooling, and compliance.
- Source-to-Image (S2I) & BuildConfigs: Automatically building container images directly from Git repositories.
- OpenShift Routes & Ingress: Routing external traffic with automated Let's Encrypt or corporate certificates.
- Security Context Constraints (SCC): Enforcing strict multi-tenant container isolation and user namespace policies.
Quick Start
# Login
oc login -u developer -p developer https://api.crc.testing:6443
# Create Project (Namespace)
oc new-project my-app
# Deploy from Source (Source-to-Image)
oc new-app nodejs~https://github.com/sclorg/nodejs-ex.git
Core Concepts
OpenShift BuildConfig & ImageStream (S2I)
Building containers from Git inside the cluster:
apiVersion: image.openshift.io/v1
kind: ImageStream
metadata:
name: billing-api
namespace: prod-apps
---
apiVersion: build.openshift.io/v1
kind: BuildConfig
metadata:
name: billing-api-build
namespace: prod-apps
spec:
source:
type: Git
git:
uri: https://github.com/my-org/billing-service.git
ref: main
strategy:
type: Source
sourceStrategy:
from:
kind: ImageStreamTag
name: nodejs:20-ubi9
namespace: openshift
output:
to:
kind: ImageStreamTag
name: billing-api:latest
triggers:
- type: GitHub
github:
secretReference:
name: webhook-secret
- type: ConfigChange
OpenShift Route for External Traffic
Exposing services with edge TLS termination:
apiVersion: route.openshift.io/v1
kind: Route
metadata:
name: billing-api-route
namespace: prod-apps
spec:
host: billing.apps.cluster.example.com
to:
kind: Service
name: billing-api-service
weight: 100
port:
targetPort: 8080
tls:
termination: edge
insecureEdgeTerminationPolicy: Redirect
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 29d ago Changed · +5 lines c46cbae1a6a9
- 1mo ago Changed · +101 lines · +25 tokens per session scan B → A 320a6228fa78
- 1mo ago First seen · 58 lines · 16 tokens per session scan B b2a16d613781
openshift is a skill published in the GitHub repository G1Joshi/Agent-Skills (15 stars, last pushed 29d ago), licensed MIT. It adds 41 tokens to every session and 1,112 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
shipping-and-launch
Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.
agents-v2-py
Build container-based Foundry Agents with Azure AI Projects SDK (ImageBasedHostedAgentDefinition). Use when creating hosted agents with custom container images in Azure AI Foundry.
odoo-docker-deployment
Production-ready Docker and docker-compose setup for Odoo with PostgreSQL, persistent volumes, environment-based configuration, and Nginx reverse proxy.
cost-optimization
Guides systematic cloud and infrastructure cost reduction. Use when cloud bills are growing unpredictably, when rightsizing resources, when evaluating reserved capacity, or when building cost-aware architecture. Use when you need to optimize spend without sacrificing reliability or performance.
apify-actor-development
Important: Before you begin, fill in the generatedBy property in the meta section of .actor/actor.json. Replace it with the tool and model you're currently using, such as "Claude Code with Claude Sonnet 4.5". This helps Apify monitor and improve AGENTS.md for specific AI tools and models.
apify-actorization
Actorization converts existing software into reusable serverless applications compatible with the Apify platform. Actors are programs packaged as Docker images that accept well-defined JSON input, perform an action, and optionally produce structured JSON output.