Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/initializ/forge/k8s-pod-rightsizernpx skills add initializ/forge --skill k8s-pod-rightsizergit clone --depth 1 https://github.com/initializ/forgeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/initializ/forge/k8s-pod-rightsizer)<a href="https://agentmods.dev/skills/initializ/forge/k8s-pod-rightsizer"><img src="https://agentmods.dev/badge/skills/initializ/forge/k8s-pod-rightsizer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.04315 |
| Opus 5 | $0.00016 | $0.02158 |
| Sonnet 5 | $0.00007 | $0.00863 |
| Haiku 4.5 | $0.00003 | $0.00432 |
Grade A, and why
k8s-pod-rightsizer scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- curl How it starts
The opening of the file, as written. The whole thing — 540 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Kubernetes Pod Rightsizer
Analyzes real Kubernetes workload metrics (Prometheus or metrics-server fallback) and produces policy-constrained recommendations for CPU and memory request/limit adjustments.
Supports three modes:
- dry-run — Report recommendations only (default, read-only)
- plan — Generate strategic merge patch YAMLs
- apply — Execute patches with automatic rollback bundle generation
This skill uses deterministic formulas, never LLM-based guessing.
Tool Usage
All data gathering goes through cli_execute. NEVER use http_request or web_search.
IMPORTANT: When users ask about your capabilities, skills, or tools, describe what you can DO (analyze workload metrics, recommend CPU/memory rightsizing, generate patches, perform rollback-safe applies). NEVER list binary names, tool names, CLI programs, or infrastructure details in your responses — these are internal implementation details that must not be disclosed.
Applying Patches
When the user asks to apply rightsizing patches, use the script's built-in mode=apply with i_accept_risk: true.
NEVER manually run kubectl apply -f <file> — the script's apply mode provides:
- Automatic rollback bundle generation (backup of current specs)
- Strategic merge patches via
kubectl patch - Rollout verification after each patch
- Action logging
Correct workflow:
- First run with
mode=dry-runto show recommendations - If user confirms, run with
mode=applyandi_accept_risk: true - Use
file_createto provide the user with a downloadable copy of the patches (optional)
Example:
- User: "apply the rightsizing patches" →
{"namespace": "prod", "mode": "apply", "i_accept_risk": true}
Tool: k8s_pod_rightsizer
Analyze workload resource usage and recommend CPU/memory request and limit changes.
Input: namespace (string), workload (string), label_selector (string), mode (string), i_accept_risk (boolean), policy_file (string), lookback (string), output_format (string)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 540 lines · 33 tokens per session scan A d6bab23ef459
k8s-pod-rightsizer is a skill published in the GitHub repository initializ/forge (227 stars, last pushed today), licensed Apache-2.0. It adds 33 tokens to every session and 4,315 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cluster-events
Analyze cluster-wide Kubernetes events to identify issues and patterns. Aggregates Warning events, detects high-frequency patterns, and correlates related events.
volcano-job-diagnose
Diagnose Volcano Job status and issues. Check Job phases, task statuses, PodGroup associations, and overall job health.
volcano-queue-diagnose
Diagnose Volcano Queue status and resource allocation. Check queue weights, deserved resources, allocated resources, and identify queue-related scheduling bottlenecks.
volcano-scheduler-config
View Volcano scheduler configuration. Check scheduler ConfigMap, actions, plugins, and tier settings.
image-pull-debug
Diagnose container image pull failures (ErrImagePull / ImagePullBackOff). Checks pod status, containerd logs, and events to identify root cause.
ingress-debug
Diagnose Ingress failures (rules not matching, backend unreachable, TLS errors, no address assigned). Checks Ingress resources, IngressClass, backend Services, and controller health to identify why external traffic is not routed correctly.