{"id":"aae374e6-4421-482f-bd61-f3f94b2c35fa","shortId":"yxVVdx","kind":"skill","title":"Capture low-level Kubernetes runtime evidence with Inspektor Gadget","tagline":"Run named Inspektor Gadget traces and snapshots when an agent needs eBPF-backed runtime evidence from pods, containers, or nodes that ordinary logs and metrics do not expose.","description":"# Capture low-level Kubernetes runtime evidence with Inspektor Gadget\n\nRun named Inspektor Gadget traces and snapshots when an agent needs eBPF-backed runtime evidence from pods, containers, or nodes that ordinary logs and metrics do not expose.\n\n## Prerequisites\n\nInspektor Gadget installed on Kubernetes or Linux with permissions to run gadgets\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- docker run -ti --rm --privileged -v /:/host --pid=host ghcr.io/inspektor-gadget/ig:latest run trace_open:latest\n\nRequirements and caveats from upstream:\n- ### Kubectl Node Debug\n- We can use [kubectl node debug](https://kubernetes.io/docs/tasks/debug/debug-cluster/kubectl-node-debug/) to run ig on a Kubernetes node:\n- kubectl debug --profile=sysadmin node/minikube-docker -ti --image=ghcr.io/inspektor-gadget/ig:latest -- ig run trace_open:latest\n\nBasic usage or getting-started notes:\n- Security mechanisms to restrict and lock-down which Gadgets can be run\n- The following examples use the [trace_open](https://www.inspektor-gadget.io/docs/latest/gadgets/trace_open) Gadget which triggers when a file is open on the system.\n- ### Kubernetes\n\n- Source: https://github.com/inspektor-gadget/inspektor-gadget\n- Extracted from upstream docs: https://raw.githubusercontent.com/inspektor-gadget/inspektor-gadget/HEAD/README.md\n\n## Documentation\n\n- https://inspektor-gadget.io/docs/latest/reference/run/\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget/)","tags":["capture","low","level","kubernetes","runtime","evidence","with","inspektor","gadget","skills","agentskillexchange","agent-skills"],"capabilities":["skill","source-agentskillexchange","skill-capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,581 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:09:45.118Z","embedding":null,"createdAt":"2026-05-18T13:15:34.957Z","updatedAt":"2026-05-18T19:09:45.118Z","lastSeenAt":"2026-05-18T19:09:45.118Z","tsv":"'/docs/latest/gadgets/trace_open)':188 '/docs/latest/reference/run/':215 '/docs/tasks/debug/debug-cluster/kubectl-node-debug/)':136 '/host':110 '/inspektor-gadget/ig:latest':115,153 '/inspektor-gadget/inspektor-gadget':204 '/inspektor-gadget/inspektor-gadget/head/readme.md':211 '/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget/)':222 'agent':20,59,217 'agentskillexchange.com':221 'agentskillexchange.com/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget/)':220 'back':24,63 'basic':159 'captur':1,40 'caveat':122 'contain':29,68 'debug':127,133,145 'doc':208 'docker':104 'document':212 'ebpf':23,62 'ebpf-back':22,61 'environ':103 'evid':7,26,46,65 'exampl':181 'exchang':219 'expos':39,78 'extract':205 'file':194 'follow':180 'gadget':10,14,49,53,81,91,175,189 'get':163 'getting-start':162 'ghcr.io':114,152 'ghcr.io/inspektor-gadget/ig:latest':113,151 'github.com':203 'github.com/inspektor-gadget/inspektor-gadget':202 'host':112 'ig':139,154 'imag':150 'inspektor':9,13,48,52,80 'inspektor-gadget.io':214 'inspektor-gadget.io/docs/latest/reference/run/':213 'instal':82,92,96 'kubectl':125,131,144 'kubernet':5,44,84,142,200 'kubernetes.io':135 'kubernetes.io/docs/tasks/debug/debug-cluster/kubectl-node-debug/)':134 'latest':119,158 'level':4,43 'linux':86 'lock':172 'lock-down':171 'log':34,73 'low':3,42 'low-level':2,41 'match':101 'mechan':167 'metric':36,75 'name':12,51 'need':21,60 'node':31,70,126,132,143 'node/minikube-docker':148 'note':165 'open':118,157,185,196 'ordinari':33,72 'path':99 'permiss':88 'pid':111 'pod':28,67 'prerequisit':79 'privileg':108 'profil':146 'raw.githubusercontent.com':210 'raw.githubusercontent.com/inspektor-gadget/inspektor-gadget/head/readme.md':209 'requir':120 'restrict':169 'rm':107 'run':11,50,90,105,116,138,155,178 'runtim':6,25,45,64 'secur':166 'setup':98 'skill':218 'skill-capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget' 'snapshot':17,56 'sourc':201,216 'source-agentskillexchange' 'start':164 'sysadmin':147 'system':199 'ti':106,149 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'trace':15,54,117,156,184 'trigger':191 'upstream':95,124,207 'usag':160 'use':93,130,182 'v':109 'www.inspektor-gadget.io':187 'www.inspektor-gadget.io/docs/latest/gadgets/trace_open)':186","prices":[{"id":"20be9454-d001-4c38-adaa-648a1ba554c2","listingId":"aae374e6-4421-482f-bd61-f3f94b2c35fa","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:15:34.957Z"}],"sources":[{"listingId":"aae374e6-4421-482f-bd61-f3f94b2c35fa","source":"github","sourceId":"agentskillexchange/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget","isPrimary":false,"firstSeenAt":"2026-05-18T13:15:34.957Z","lastSeenAt":"2026-05-18T19:09:45.118Z"}],"details":{"listingId":"aae374e6-4421-482f-bd61-f3f94b2c35fa","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"62f35af5a712bc4a93ad052d5f8e267bd5d77faf","skill_md_path":"skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Capture low-level Kubernetes runtime evidence with Inspektor Gadget","description":"Run named Inspektor Gadget traces and snapshots when an agent needs eBPF-backed runtime evidence from pods, containers, or nodes that ordinary logs and metrics do not expose."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/capture-low-level-kubernetes-runtime-evidence-with-inspektor-gadget"},"updatedAt":"2026-05-18T19:09:45.118Z"}}