kubernetes-manifest-reviewer
by Timoranjes
Professional-grade Kubernetes YAML auditor for security, API deprecations, and deployment best practices.
- Audit manifests for CIS benchmark and NSA hardening compliance.
- Identify deprecated API versions before upgrading your cluster.
- Ensure every container has calibrated resource requests and limits.
Free
Included in download
- Downloadable skill package
- Works with Compatible with Claude Code, Cursor
- 1 permission declared
Sample input
Audit my deployment.yaml for security issues and resource limits.
Sample output
Manifest Audit Results
- CRITICAL: Container 'web' runs as root. Add runAsNonRoot: true.
- HIGH: No resource limits set. Potential for noisy neighbor issues.
- WARN: Using :latest tag. Pin to a specific version.
kubernetes-manifest-reviewer
by Timoranjes
Professional-grade Kubernetes YAML auditor for security, API deprecations, and deployment best practices.
Free
Included in download
- Downloadable skill package
- Works with Compatible with Claude Code, Cursor
- 1 permission declared
- Instant install
Sample input
Audit my deployment.yaml for security issues and resource limits.
Sample output
Manifest Audit Results
- CRITICAL: Container 'web' runs as root. Add runAsNonRoot: true.
- HIGH: No resource limits set. Potential for noisy neighbor issues.
- WARN: Using :latest tag. Pin to a specific version.
About This Skill
What it does
The Kubernetes Manifest Reviewer is a specialized auditing tool designed to catch misconfigurations before they reach your cluster. It performs deep static analysis on YAML files to identify security vulnerabilities, API deprecations, and architectural anti-patterns.
Why use this skill
Manual YAML reviews are error-prone and time-consuming. This skill automates the expertise of a Senior DevOps Engineer, checking for over 50 specific failure modes including root user execution, unpinned image tags, and missing health probes. It goes beyond simple linting by cross-referencing resources—ensuring your Services actually match your Deployment labels and your ConfigMaps are correctly referenced.
Supported tools & features
- Security Auditing: Flags privileged escalation, missing seccomp profiles, and hardcoded secrets.
- API Lifecycle Management: Detects deprecated versions based on your specific K8s cluster version (1.25 through 1.32+).
- Reliability Checks: Validates liveness/readiness probes, resource limits, and anti-affinity rules.
- Best Practices: Enforces standard labels, proper rollout strategies, and structured logging.
The Output
You receive a structured Markdown report categorizing issues by severity (Critical to Low). Each finding includes the specific line number, a clear description of the impact, and a checklist of best practices applied or missed.
Use Cases
- Audit manifests for CIS benchmark and NSA hardening compliance.
- Identify deprecated API versions before upgrading your cluster.
- Ensure every container has calibrated resource requests and limits.
- Verify Service selectors match Deployment labels across multiple files.
- Prevent production outages by enforcing liveness and readiness probes.
Known Limitations
- Does not perform dynamic runtime analysis.
- Cannot validate custom CRD schemas unless provided.
- Limited to static YAML/JSON file analysis.
How to Install
mkdir -p ~/.claude/skills && curl -sL https://www.agensi.io/api/install/kubernetes-manifest-reviewer -o /tmp/kubernetes-manifest-reviewer.zip && unzip -o /tmp/kubernetes-manifest-reviewer.zip -d ~/.claude/skills && rm /tmp/kubernetes-manifest-reviewer.zipFree skills install directly. Paid skills require purchase - use the download button above after buying.
Reviews
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
Security Scanned
Passed automated security review
Permissions
File Scopes
Compatible with Claude Code, Cursor, Windsurf, and Cline.
Creator
Frequently Asked Questions
Learn More About AI Agent Skills
More Premium Skills
Multi-Agent Orchestration Master Library
Transform Claude Code into a coordinated multi-agent system. Battle-tested tmux orchestration patterns, YAML task queues, event-driven communication, and parallel worker management for 8+ agents.
cinematic-sites
Turn any basic business URL into a high-end cinematic landing page with AI-generated 4K assets and GSAP animations.

sast-configuration
Automate the setup and optimization of Semgrep, SonarQube, and CodeQL for high-signal security testing.
software-architect
A structured framework for planning, reviewing, and evolving complex software systems with explicit trade-offs.