Kstack installs slash-command skills into Claude Code (and other AI agents) for K8s monitoring, troubleshooting, and auditing via kubectl, Kubetail, Helm, Trivy, and Pluto.
Key Takeaways
Install globally with one curl command; auto-detects Claude Code, Codex CLI, OpenCode, Cursor, and others on your PATH.
Skills cover full ops surface: /cluster-status, /investigate, /logs, /metrics, /exec, plus four audit commands (security, network, cost, outdated).
/logs and /exec use a shared tmux session so you and the agent see the same pane; /exec ships with disable-model-invocation: true to prevent unsupervised shell access.
Token efficiency is a design goal: aggregation and severity ranking happen client-side from cached JSON; follow-up questions hit jq on the cache, not the cluster API.
Detects cluster-installed services (Cilium, Istio) and routes to their specialized tooling automatically.
