scout-observe

Observe live Kubernetes resources and map ownership, lineage, and risk patterns.

14|Updated Jan 17, 2026
One-click install
npx skills add https://github.com/confighub/cub-scout --skill scout-observe
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scout-observe
Source: https://github.com/confighub/cub-scout/tree/main/skills/scout-observe
Command: npx skills add https://github.com/confighub/cub-scout --skill scout-observe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It turns a confusing, live Kubernetes state into a clear, read-only picture of what is running and how resources are owned and structured, without needing to click through multiple UIs.

Core Features & Use Cases

  • Cluster inventory & ownership mapping: List resources, show ownership, and render hierarchies so you can understand who manages what.
  • Lineage and source tracing: Trace workloads back to their Git/OCI origin to identify where the running configuration came from.
  • Risk scanning and exportable observations: Run scan patterns, and produce stable snapshots/JSON outputs for agents, audits, or pipelines.

Quick Start

Ask: "What is running in my cluster, and who owns these resources?" and run the observe verbs to get an inventory plus ownership and structure.

Frequently Asked Questions about scout-observe

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map Kubernetes cluster resources and show their ownership structure?

To map Kubernetes cluster resources and show ownership, you can run read-only observe verbs to list resources and render hierarchies, clarifying who manages what without modifying the live state.

Can I trace running Kubernetes workloads back to their Git source?

Yes, you can trace running Kubernetes workloads back to their Git or OCI origin to identify where the live configuration came from using source tracing features.

What is read-only Kubernetes cluster inventory and when do I need it?

Read-only Kubernetes cluster inventory is a snapshot of what is running and how resources are structured without modifying the cluster. You need it for troubleshooting and situational awareness.

Does this Kubernetes risk scanning approach work with GitOps workflows?

Yes, it works with GitOps workflows by tracing workload lineage to Git sources and exporting deterministic observation artifacts like JSON outputs for audits or pipelines.

How do I export Kubernetes cluster observations as stable JSON snapshots?

You can export Kubernetes cluster observations as stable JSON snapshots by running scan patterns and producing deterministic observation artifacts suitable for agents, audits, or pipelines.

What are the limitations of read-only Kubernetes cluster observation?

The limitation of read-only Kubernetes cluster observation is that it constrains tool access to safe kubectl read calls and specific observe verbs, preventing any modifications to the live cluster state.