Aks Network Capture

From the author

Collects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: "capture packets on an AKS node", "take a pcap", "run tcpdump on AKS", "prove where packets drop". Use for explicit packet-capture intent after read-only diagnostics, not general AKS connectivity or ingress troubleshooting.

— the description by Microsoft

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

The aks-network-capture skill provides a governed procedure for collecting wire-level evidence from Azure Kubernetes Service (AKS) nodes. It is designed for scenarios requiring explicit packet capture after initial read-only diagnostics have been exhausted. The skill includes scripts for setting up capture configurations, executing the capture, generating test traffic, and retrieving the resulting data, alongside tools for collecting relevant Azure network metadata. It emphasizes strict authorization, target binding, and resource cleanup to ensure that captures are performed securely and within defined operational boundaries.

What it does

Configures AKS nodes for packet capture using dedicated scripts.
Executes bounded packet captures on specific nodes or pods.
Collects Azure network configuration metadata for context.
Generates test traffic to facilitate network troubleshooting.
Retrieves capture artifacts and manages resource cleanup by run ID.

When to use it

When you need to perform a packet capture on an AKS node.
When you need to prove where network packets are being dropped.
After read-only diagnostics have failed to resolve a connectivity issue.
When you require wire-level evidence for network troubleshooting.

Advantages

Provides a structured, repeatable process for network evidence collection.
Includes built-in authorization and target binding steps to maintain security.
Supports both Bash and PowerShell environments for flexibility.
Ensures resource cleanup is tied to specific capture run IDs.

Usage examples

“Capture packets on an AKS node to investigate a drop.”: The agent initiates the capture workflow, starting with authorization and target binding, followed by the deployment of the capture configuration.
“Run tcpdump on AKS to troubleshoot connectivity.”: The agent guides you through the setup and execution of the packet capture scripts, ensuring the capture is bounded and authorized.

Install

Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/microsoft/aks-network-capture/download

Unzip it into the cross-client skills folder of your project:

mkdir -p .agents/skills && unzip aks-network-capture.zip -d .agents/skills

Documentation by Microsoft

Quick Reference

Use	Requires	Safety
AKS pcap evidence	`kubectl`; `az` for Azure evidence	Bounded, pinned, least privilege

When to Use This Skill

Use for explicit packet capture after read-only checks, not generic connectivity failures.

MCP Tools

Azure MCP's AKS area provides cluster and node-pool metadata, not Kubernetes command execution or packet capture.

Host Capability Gate

Before executing the workflow, confirm that the host permits the required Bash or PowerShell execution, kubectl access to the bound cluster, az for Azure evidence, access to the bundled scripts, and an approved artifact destination. A governed Azure CLI tool alone does not establish that shell, Kubernetes commands, or artifact operations are supported.

If a required capability is unavailable or prohibited, state that capture execution is unavailable in this host. Analyze supplied, appropriately redacted evidence or give the operator a target-bound collection/capture plan; do not claim to have run it. Never route kubectl through Azure MCP, add an unapproved execution path, or bypass host policy. Host support does not replace the mutation and sensitive-data approvals below.

Run bundled scripts from the skill root only after this gate is satisfied.

Workflow/Steps

Check host capabilities, then complete authorization and target binding. Capture intent is not mutation consent. Stop for separate approval before any debug-container fallback.
Install Bash / PowerShell.
Capture nodes or pods with Bash / PowerShell.
Generate traffic if approved with Bash / PowerShell.
Retrieve the exact run with Bash / PowerShell.
Gather Azure evidence with Bash / PowerShell.

The ConfigMap runs run-capture.sh inside its pinned Linux image.

Error Handling

Error	Action
Invalid input	Correct it before retrying.
Missing/stale ConfigMap	Run setup again.
Capture/retrieval failure	Inspect Job logs; missing evidence is not success.

Files

ATTRIBUTION.mdAdded by AutoGineer983 B
LICENSELicence file added by AutoGineer1.1 KiB
SKILL.md2.9 KiB
references/capture-authorization.md1.4 KiB
scripts/collect-azure-network-info.ps1Script7.9 KiB
scripts/collect-azure-network-info.shScript7.0 KiB
scripts/create-capture.ps1Script11.5 KiB
scripts/create-capture.shScript12.4 KiB
scripts/generate-test-traffic.ps1Script5.4 KiB
scripts/generate-test-traffic.shScript6.1 KiB
scripts/retrieve-captures.ps1Script9.4 KiB
scripts/retrieve-captures.shScript8.1 KiB
scripts/run-capture.shScript2.4 KiB
scripts/setup-capture-configmap.ps1Script1.7 KiB
scripts/setup-capture-configmap.shScript1.2 KiB

LICENSE

MIT License

Copyright 2025 (c) Microsoft Corporation.

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Node.js

Security

What our scanner noticed· Low risk

Scripts that your agent may run

This skill includes scripts that your agent may run. Read them before you use it.

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

K8s Manifest Generator
Seth Hobson· Community
A structured guide for generating secure, production-ready Kubernetes manifests including Deployments, Services, ConfigMaps, and Secrets.
Cloud and DevOpsClaude CodeClaude appsOpenAI Codex+14 more
MITLow riskGitHub stars of the source repository42.3k
Cloud Infrastructure Kubernetes Architect
Seth Hobson· Community
An expert Kubernetes architect specializing in cloud-native infrastructure, GitOps workflows, and container orchestration.
Cloud and DevOpsClaude Code
MITGitHub stars of the source repository42.3k
Service Mesh Expert
Seth Hobson· Community
An expert architect for designing, securing, and managing service mesh deployments in cloud-native environments.
Cloud and DevOpsClaude Code
MITGitHub stars of the source repository42.3k
Istio Traffic Management
Seth Hobson· Community
A comprehensive guide to managing service mesh traffic, routing, and resilience policies using Istio.
Cloud and DevOpsClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Kubernetes Operations Kubernetes Architect
Seth Hobson· Community
An expert Kubernetes architect providing guidance on cloud-native infrastructure, GitOps workflows, and container orchestration.
Cloud and DevOpsClaude Code
MITGitHub stars of the source repository42.3k
Cicd Automation Kubernetes Architect
Seth Hobson· Community
An expert Kubernetes architect providing guidance on cloud-native infrastructure, GitOps workflows, and container orchestration.
Cloud and DevOpsClaude Code
MITGitHub stars of the source repository42.3k

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download aks-network-capture.zip