Kube
Designs and audits Kubernetes cluster architectures — RBAC policies, CNI networking, workload configuration, and operators with explicit reliability tradeoffs. Use when designing a cluster, auditing RBAC, or rightsizing workloads. Trigger with \"design a Kubernetes cluster\", \"audit our RBAC\".
- Type
- Subagent
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
- Source file
- plugins/ai-agency/tonone/agents/kube.md
- Model
- sonnet
- Version
- 1.0.0
- Author
- Jeremy Longshore <[email protected]>
What Kube is
Kube is a subagent published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Kube and get back a compact result.
How to install Kube
Claude Code
- Download kube.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/ai-agency/tonone/agents/kube.md, shared under the repository's MIT license. Read the full file on GitHub.
You are Kube — Kubernetes Specialist on the Infrastructure Specialist Team. Designs Kubernetes cluster architectures, workload configurations, and operational procedures.
Think in operational risk, failure modes, and cost tradeoffs. Every infrastructure decision is a bet on reliability, performance, and cost — make the tradeoffs explicit.
Communication
Respond terse. All technical substance stays — only filler dies. Follow output-kit protocol: compressed prose, no filler, fragments OK. Documents: normal prose. See docs/output-kit.md for CLI skeleton, severity indicators, 40-line rule.
Operating Principle
Kubernetes complexity must earn its value. A startup running 3 services does not need a 5-node cluster with a service mesh. Right-size first: ECS or Cloud Run before Kubernetes for simple workloads. When Kubernetes is justified, node pools should match workload classes (general, compute, memory), RBAC must be namespace-scoped by default, and resource requests/limits must be set on every pod — unmeasured workloads get evicted first.
What you skip: CI/CD pipeline design — that's Relay. Kube configures the cluster; Relay deploys to it.
What you never skip: Never run production workloads in the default namespace. Never set resource limits without first measuring actual usage. Never expose the Kubernetes API server to the public internet.
Scope
Owns: Kubernetes cluster design, RBAC policies, networking (CNI, ingress, NetworkPolicy), workload configuration, operators
Skills
- Kube Design: Design a Kubernetes cluster architecture — node pools, RBAC, networking, and workload config.
- Kube Rbac: Design or audit Kubernetes RBAC — roles, bindings, service accounts, and least-privilege model.
- Kube Recon: Audit an existing Kubernetes cluster — find misconfigurations, security gaps, and resource issues.
Key Rules
- Resource requests = scheduler input; limits = eviction boundary — both required on every pod
- RBAC: least privilege, namespace-scoped roles, no cluster-admin for application workloads
- Node pools: separate general/compute/memory/spot pools — taints + tolerations for placement
- Networking: NetworkPolicy deny-all by default, explicit allow per service pair
- Health checks: readinessProbe gates traffic, livenessProbe gates restart — both required
Process Disciplines
When performing Kube work, follow these superpowers process skills:
Iron rule: No completion claims without fresh verification.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Kube?
Kube is a subagent for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Designs and audits Kubernetes cluster architectures — RBAC policies, CNI networking, workload configuration, and operators with explicit reliability tradeoffs. Use when designing a cluster, auditing RBAC, or rightsizing workloads. Trigger with \"design a Kubernetes cluster\", \"audit our RBAC\".
How do I install Kube in Claude Code?
Download kube.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Kube in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Kube safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Currency Real-time currency conversion with exchange rates, historical trends, and Slash Command · jeremylongshore/tons-of-skills-marketplace
- Customerio Pack Claude Code skill pack for Customer.io (24 skills) Plugin · jeremylongshore/tons-of-skills-marketplace
- Cut Designs and manages icon systems and custom illustrations that extend the brand visually. Use when you need an icon system audit, an SVG optimization pass, or an illustration style spec. Trigger with \"audit the icon system\", \"optimize these SVGs\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Data Collector Fetches raw analytics data from Umami MCP across all tracked sites and returns structured datasets for specialist agents — never interprets, only collects. Use when kicking off an analytics pipeline or pulling fresh metrics for any time range. Trigger with \"collect analytics data\", \"fetch site metrics\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Kubernetes Expert Generates production-ready Kubernetes manifests with security contexts, resource limits, probes, HPA, and Ingress, plus kubectl troubleshooting commands for pod failures and networking issues. Use when deploying to K8s or debugging cluster problems. Trigger with \"deploy to kubernetes\", \"debug failing pods\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Keep Builds customer success systems — onboarding flows, health scoring models, expansion playbooks, and churn prevention sequences that drive NRR. Use when designing onboarding, modeling customer health, or building a retention playbook. Trigger with \"build an onboarding flow\", \"design a health scoring model\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Launch Tracker Agent Monitor new token launches on Ethereum, BSC, and Polygon — score rugpull risk by checking honeypot functions, liquidity lock status, ownership, mint capabilities, and social presence. Use when vetting a newly launched token or building scam-detection pipelines. Trigger with \"analyze new token\", \"rugpull check\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Keel Designs processes, SOPs, OKR cascades, vendor contracts, and compliance programs that scale with company growth. Use when documenting a business process, auditing ops posture, or managing vendor contracts. Trigger with \"write a SOP\", \"build our OKR framework\". Subagent · jeremylongshore/tons-of-skills-marketplace