kubernetes-manifest-reviewer
by Zicheng Liao
Professional-grade Kubernetes YAML auditor for security, API deprecations, and deployment best practices.
- Audit manifests for CIS benchmark and NSA hardening compliance.
- Identify deprecated API versions before upgrading your cluster.
- Ensure every container has calibrated resource requests and limits.
Free
Sample output
Kubernetes Manifest Review Report
- Issues found: 1 critical, 2 high
- CRITICAL: [line 22]
runAsUser: 0detected. Container should run as non-root. - HIGH: [line 15]
image: nginx:latest- tag is unpredictable. Use a specific version. - HIGH: [line 30] Missing
resources.limits.
kubernetes-manifest-reviewer
by Zicheng Liao
Professional-grade Kubernetes YAML auditor for security, API deprecations, and deployment best practices.
Free
Included in download
- Downloadable skill package
- 1 permission declared
- Instant install
Sample output
Kubernetes Manifest Review Report
- Issues found: 1 critical, 2 high
- CRITICAL: [line 22]
runAsUser: 0detected. Container should run as non-root. - HIGH: [line 15]
image: nginx:latest- tag is unpredictable. Use a specific version. - HIGH: [line 30] Missing
resources.limits.
About This Skill
What it does
The Kubernetes Manifest Reviewer is a specialized auditing tool designed to catch misconfigurations before they reach your cluster. It performs deep static analysis on YAML files to identify security vulnerabilities, API deprecations, and architectural anti-patterns.
Why use this skill
Manual YAML reviews are error-prone and time-consuming. This skill automates the expertise of a Senior DevOps Engineer, checking for over 50 specific failure modes including root user execution, unpinned image tags, and missing health probes. It goes beyond simple linting by cross-referencing resources—ensuring your Services actually match your Deployment labels and your ConfigMaps are correctly referenced.
Supported tools & features
- Security Auditing: Flags privileged escalation, missing seccomp profiles, and hardcoded secrets.
- API Lifecycle Management: Detects deprecated versions based on your specific K8s cluster version (1.25 through 1.32+).
- Reliability Checks: Validates liveness/readiness probes, resource limits, and anti-affinity rules.
- Best Practices: Enforces standard labels, proper rollout strategies, and structured logging.
The Output
You receive a structured Markdown report categorizing issues by severity (Critical to Low). Each finding includes the specific line number, a clear description of the impact, and a checklist of best practices applied or missed.
Use Cases
- Audit manifests for CIS benchmark and NSA hardening compliance.
- Identify deprecated API versions before upgrading your cluster.
- Ensure every container has calibrated resource requests and limits.
- Verify Service selectors match Deployment labels across multiple files.
- Prevent production outages by enforcing liveness and readiness probes.
How to Install
mkdir -p ~/.claude/skills && curl -sL https://www.agensi.io/api/install/kubernetes-manifest-reviewer -o /tmp/kubernetes-manifest-reviewer.zip && unzip -o /tmp/kubernetes-manifest-reviewer.zip -d ~/.claude/skills && rm /tmp/kubernetes-manifest-reviewer.zipFree skills install directly. Paid skills require purchase - use the download button above after buying.
Reviews
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
Security Scanned
Passed automated security review
Permissions
File Scopes
Creator
Frequently Asked Questions
Learn More About AI Agent Skills
More Premium Skills
cinematic-sites
Turn any basic business URL into a high-end cinematic landing page with AI-generated 4K assets and GSAP animations.
software-architect
A structured framework for planning, reviewing, and evolving complex software systems with explicit trade-offs.
designing-hybrid-context-layers
Architects the right retrieval strategy for every query — teaching your agent when to use RAG, a knowledge graph, or a temporal index instead of defaulting to vector search for everything.
consumer-motivation-analyzer
Go beyond surface-level feedback to uncover the psychological drivers and hidden motivations behind buyer behavior.