
from kubeshark11,902
Authoritative reference for KFL2 — the CEL-based filter language used to query and narrow Kubeshark traffic captures.
Provides a comprehensive reference and best-practice guidance for writing KFL2 filter expressions (Kubeshark's CEL-based query language). Covers core syntax, operators, string/collection/time functions, protocol flags, Kubernetes context fields, HTTP/DNS/database filters, transport-layer and flow tracking, and performance tips. Essential for generating correct, type-safe filters for traffic investigation.
Load this skill whenever the agent must write, suggest, or validate KFL filter expressions — e.g., building display filters for HTTP errors, DNS troubleshooting, Kubernetes namespace/service filtering, or protocol-specific queries. It must be present before constructing any KFL to avoid silent failures from incorrect syntax or types.
Intended for agents that author or suggest queries for Kubeshark dashboards or MCP agents integrated with Kubeshark; useful for SRE and observability tools that output CEL/KFL expressions.
KFL2 skill is a comprehensive reference for Kubeshark's CEL-based filter language. Well-structured documentation covering protocol detection, Kubernetes context, HTTP/DNS/database filtering, and performance tips. No scripts included — purely a reference skill. No security concerns: no external calls, no credentials, no destructive commands. Niche audience limited to Kubeshark users.
Clean reference skill with no executable code. Good progressive disclosure with main concepts in SKILL.md and detailed field reference in a separate file. The description trigger list is thorough and well-crafted. No security issues whatsoever — this is pure documentation.