Aks Deployment Skill
timothywarner/chatgptclass
Deploy and operate workloads on Azure Kubernetes Service (AKS) the safe way.
Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence.
Install Aks Network Capture
$ npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install microsoft/GitHub-Copilot-for-Azure aks-network-capture --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/microsoft/GitHub-Copilot-for-Azure.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/aks-skills/skills/aks-network-capture .claude/skills/aks-network-capture && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "aks-network-capture" agent skill from https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-capture into .claude/skills/aks-network-capture/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aks-network-capture", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-captureType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install microsoft/GitHub-Copilot-for-Azure aks-network-capture --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/microsoft/GitHub-Copilot-for-Azure.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugins/aks-skills/skills/aks-network-capture .agents/skills/aks-network-capture && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "aks-network-capture" agent skill from https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-capture into .agents/skills/aks-network-capture/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aks-network-capture", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install microsoft/GitHub-Copilot-for-Azure aks-network-capture --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/microsoft/GitHub-Copilot-for-Azure.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugins/aks-skills/skills/aks-network-capture .cursor/skills/aks-network-capture && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "aks-network-capture" agent skill from https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-capture into .cursor/skills/aks-network-capture/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aks-network-capture", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/microsoft/GitHub-Copilot-for-Azure.git --path plugins/aks-skills/skills/aks-network-capture--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install microsoft/GitHub-Copilot-for-Azure aks-network-capture --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/microsoft/GitHub-Copilot-for-Azure.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugins/aks-skills/skills/aks-network-capture .gemini/skills/aks-network-capture && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "aks-network-capture" agent skill from https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-capture into .gemini/skills/aks-network-capture/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aks-network-capture", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install microsoft/GitHub-Copilot-for-Azure aks-network-captureInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/microsoft/GitHub-Copilot-for-Azure.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugins/aks-skills/skills/aks-network-capture .github/skills/aks-network-capture && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "aks-network-capture" agent skill from https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-capture into .github/skills/aks-network-capture/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aks-network-capture", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install microsoft/GitHub-Copilot-for-Azure aks-network-capture --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/microsoft/GitHub-Copilot-for-Azure.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugins/aks-skills/skills/aks-network-capture .opencode/skills/aks-network-capture && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "aks-network-capture" agent skill from https://github.com/microsoft/GitHub-Copilot-for-Azure/tree/main/plugins/aks-skills/skills/aks-network-capture into .opencode/skills/aks-network-capture/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aks-network-capture", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
aks-network-capture- GitHub stars
- 255
- Token cost
- ~738 tokens
- SKILL.md length
- 281 words
- Files
- 14 (incl. scripts, references)
- Skills in repo
- 61
- Repo updated
- First seen
- Licence
- MIT
At a glance
Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence.
- Works in 6 steps: Check host capabilities, then complete… → Install Bash / PowerShell. → Capture nodes or pods with Bash /… → …
- Explicit packet-capture intent after read-only diagnostics
- SKILL.md covers Quick Reference, When to Use This Skill, MCP Tools and Host Capability Gate, plus 2 more sections
- Runs Shell and PowerShell scripts from its folder
What it does
Aks Network Capture is an agent skill from microsoft/GitHub-Copilot-for-Azure, published by the product's own GitHub organization. Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.
Its SKILL.md is about 740 tokens, which your agent loads only when the skill is triggered. The skill folder holds 15 other files, including scripts and reference files (for example `references/capture-authorization.md`, `scripts/collect-azure-network-info.sh` and `scripts/create-capture.sh`).
It sits in DevOps & Cloud, covering Cloud networking and Shell scripting. It works with Microsoft Azure and Kubernetes. The repository describes itself as: GitHub Copilot for Azure. The licence is MIT.
When your agent uses it
- Explicit packet-capture intent after read-only diagnostics
- Not general AKS connectivity
- Ingress troubleshooting
Example prompts
- “capture packets on an AKS node”
- “take a pcap”
- “run tcpdump on AKS”
- “/aks-network-capture”
Requirements
- A Bash shell
- PowerShell
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- Check host capabilities, then complete authorization and target binding.
- Install Bash / PowerShell.
- Capture nodes or pods with Bash / PowerShell.
- Generate traffic if approved with Bash / PowerShell.
- Retrieve the exact run with Bash / PowerShell.
- Gather Azure evidence with Bash / PowerShell.
What it can do on your machine
Read from SKILL.md and the folder at commit ce94fce. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 11 files in scripts/ (Shell and PowerShell), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Aks Network Capture loads about 738 tokens when it runs, and up to ~1.1k if it reads all its reference files. Until then it costs about 89 tokens; SKILL.md has 281 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from microsoft/GitHub-Copilot-for-Azure at commit ce94fce, republished under its MIT licence (© microsoft). 281 words, ~738 tokens.
Download SKILL.mdSave it as
.claude/skills/aks-network-capture/SKILL.md (or your agent's skills folder). This skill also uses 13 other files; get the full folder from GitHub.- name
- aks-network-capture
- description
- Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.
- license
- MIT
- metadata.author
- Microsoft
- metadata.version
- 0.0.0-placeholder
AKS Network Capture
Quick Reference
| Use | Requires | Safety |
|---|---|---|
| AKS pcap evidence | kubectl; az for Azure evidence | Bounded, pinned, least privilege |
When to Use This Skill
Use for explicit packet capture after read-only checks, not generic connectivity failures.
MCP Tools
Azure MCP's AKS area provides cluster and node-pool metadata, not Kubernetes command execution or packet capture.
Host Capability Gate
Before executing the workflow, confirm that the host permits the required
Bash or PowerShell execution, kubectl access to the bound cluster, az for
Azure evidence, access to the bundled scripts, and an approved artifact
destination. A governed Azure CLI tool alone does not establish that shell,
Kubernetes commands, or artifact operations are supported.
If a required capability is unavailable or prohibited, state that capture
execution is unavailable in this host. Analyze supplied, appropriately
redacted evidence or give the operator a target-bound collection/capture plan;
do not claim to have run it. Never route kubectl through Azure MCP, add an
unapproved execution path, or bypass host policy. Host support does not replace
the mutation and sensitive-data approvals below.
Run bundled scripts from the skill root only after this gate is satisfied.
Workflow/Steps
- Check host capabilities, then complete authorization and target binding. Capture intent is not mutation consent. Stop for separate approval before any debug-container fallback.
- Install Bash / PowerShell.
- Capture nodes or pods with Bash / PowerShell.
- Generate traffic if approved with Bash / PowerShell.
- Retrieve the exact run with Bash / PowerShell.
- Gather Azure evidence with Bash / PowerShell.
The ConfigMap runs run-capture.sh inside its pinned Linux image.
Error Handling
| Error | Action |
|---|---|
| Invalid input | Correct it before retrying. |
| Missing/stale ConfigMap | Run setup again. |
| Capture/retrieval failure | Inspect Job logs; missing evidence is not success. |
© microsoft, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 13 other files (scripts, references) in plugins/aks-skills/skills/aks-network-capture of microsoft/GitHub-Copilot-for-Azure.
- SKILL.md
- references/capture-authorization.md
- scripts/collect-azure-network-info.ps1
- scripts/collect-azure-network-info.sh
- scripts/create-capture.ps1
- scripts/create-capture.sh
- scripts/generate-test-traffic.ps1
- scripts/generate-test-traffic.sh
- scripts/retrieve-captures.ps1
- scripts/retrieve-captures.sh
- scripts/run-capture.sh
- scripts/setup-capture-configmap.ps1
- scripts/setup-capture-configmap.sh
- version.json
Open the folder on GitHubat commit ce94fce
Compare with similar skills
Aks Network Capture next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Aks Network Capture this skillmicrosoft/GitHub-Copilot-for-Azure | 255 | — | ~738 | Automated safety check: Pass | MIT | |
| Aks Deployment Skilltimothywarner/chatgptclass | 143 | — | ~916 | Automated safety check: Pass | Custom licence | |
| Managing DNSancoleman/ai-design-components | 526 | — | ~3.6k | Automated safety check: Notes | MIT | |
| Kubeshark KFL2 Filter Referencekubeshark/kubeshark | 12k | — | ~3.6k | Automated safety check: Pass | Apache-2.0 | |
| Nginx To Higress Migrationhigress-group/higress | 9.5k | — | ~3.9k | Automated safety check: Pass | Apache-2.0 | |
| NGINX Ingress Controller Feature Checklistsnginx/kubernetes-ingress | 5.1k | — | ~1.4k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Managing DNS
ancoleman/ai-design-components
Manage DNS records, TTL strategies, and DNS-as-code automation for infrastructure.
Kubeshark KFL2 Filter Reference
kubeshark/kubeshark
Syntax reference for KFL2, the CEL-based display filter language used to search Kubernetes network traffic captured by Kubeshark, loaded before any filter is written.
Nginx To Higress Migration
higress-group/higress
Migrate from ingress-nginx to Higress in Kubernetes environments.
NGINX Ingress Controller Feature Checklists
nginx/kubernetes-ingress
Gives step-by-step checklists for adding Ingress annotations, VirtualServer fields and Helm values to the NGINX Kubernetes Ingress Controller, with common gotchas.
NGINX Ingress Policy CRD Guide
nginx/kubernetes-ingress
Step-by-step checklist for adding a new Policy CRD type to the NGINX Ingress Controller, from the Go types and validation to config generation and templates.
More from microsoft/GitHub-Copilot-for-Azure
All 61 skills in this repo- Official
Capacity
microsoft/GitHub-Copilot-for-Azure
Discovers available Azure OpenAI model capacity across regions and projects.
- Official
Deploy Model
microsoft/GitHub-Copilot-for-Azure
Unified Azure OpenAI model deployment skill with intelligent intent-based routing.
- Official
Azure Storage
microsoft/GitHub-Copilot-for-Azure
Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake.
- Official
Microsoft Foundry
microsoft/GitHub-Copilot-for-Azure
Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end.
- Official
Entra Agent Id
microsoft/GitHub-Copilot-for-Azure
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmipath, OBO, cross-tenant)…
- Official
Azure Kubernetes Automatic Readiness
microsoft/GitHub-Copilot-for-Azure
Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility.
Related
Works with
Categories
Questions about Aks Network Capture
What does Aks Network Capture do?
Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. Aks Network Capture is an agent skill from microsoft/GitHub-Copilot-for-Azure, published by the product's own GitHub organization. Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence.
When should I use Aks Network Capture?
Aks Network Capture fits situations like: explicit packet-capture intent after read-only diagnostics; not general AKS connectivity; ingress troubleshooting.
How do I install Aks Network Capture in Claude Code?
Run `npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a claude-code`. Or copy the skill folder (plugins/aks-skills/skills/aks-network-capture in microsoft/GitHub-Copilot-for-Azure) into .claude/skills/aks-network-capture in your project. Claude Code loads it when a task matches its description.
How do I install Aks Network Capture in Codex?
Run `npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a codex`. Or copy the skill folder (plugins/aks-skills/skills/aks-network-capture in microsoft/GitHub-Copilot-for-Azure) into .agents/skills/aks-network-capture in your project. Codex loads it when a task matches its description.
Can I use Aks Network Capture in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add microsoft/GitHub-Copilot-for-Azure --skill aks-network-capture -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/aks-network-capture, .gemini/skills/aks-network-capture, .github/skills/aks-network-capture and .opencode/skills/aks-network-capture in your project.
What does Aks Network Capture need to run?
Going by SKILL.md and its folder, Aks Network Capture needs a shell and PowerShell for the scripts in its folder. Our summary lists: A Bash shell; PowerShell.
Does Aks Network Capture access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Aks Network Capture safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Aks Network Capture use?
Aks Network Capture is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Aks Network Capture use?
About 738 tokens (SKILL.md is roughly 3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 371 tokens, read only when the agent opens those files.
What are the alternatives to Aks Network Capture?
Skills that share tags, products or a category with Aks Network Capture: Aks Deployment Skill (timothywarner/chatgptclass, 143 stars), Managing DNS (ancoleman/ai-design-components, 526 stars), Kubeshark KFL2 Filter Reference (kubeshark/kubeshark, 12k stars) and Nginx To Higress Migration (higress-group/higress, 9.5k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Aks Network Capture?
microsoft (a GitHub organization, an official publisher) maintains it in microsoft/GitHub-Copilot-for-Azure, which has 255 GitHub stars. The repository holds 61 skills in this directory. The repository was last updated on October 9, 2026.
Source: microsoft/GitHub-Copilot-for-Azure on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.