The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The controller is documented to download Clojure toolchain components at runtime if they are missing from the persistent volume cache. This is a documented dependency management behavior for the Babashka-based execution environment.
[COMMAND_EXECUTION]: The operator performs extensive command execution using kubectl for resource management, ansible for node configuration, and OpenTofu for infrastructure provisioning, which are essential for its documented purpose.
[INDIRECT_PROMPT_INJECTION]: The skill processes Kubernetes Custom Resources (RedisDeployment) which represent an attack surface for configuration-based injection.
Ingestion points: The primary ingestion point is the spec.config field within the RedisDeployment custom resource (SKILL.md).
Boundary markers: The skill specifies the use of CEL rules for field immutability and schema validation in the CRD (references/contract.md).
Capability inventory: The operator invokes powerful CLI tools (kubectl, ansible, tofu) based on the resource configuration.
Sanitization: The controller includes validation logic and regex checks to ensure image references include secure SHA-256 digests (references/pins.md).
[PRIVILEGE_ESCALATION]: The controller process runs with root privileges in its container. As documented in the skill, this is required to manage file permissions for sensitive assets like SSH keys and shared caches on persistent volumes.

redis-operator-kubernetes