Pulumi infrastructure-as-code and Flux CD GitOps skills for Claude Code with ESC, OIDC, and cloud provider best practices.
97
97%
Does it follow best practices?
Impact
Pending
No eval scenarios have been run
Risky
Do not use without reviewing
The Flux Operator CLI includes commands for managing AI agent skills distributed as OCI artifacts.
Install skills from an OCI artifact repository.
flux-operator skills install <repository> [flags]Skills are installed to the .agents/skills directory.
| Flag | Default | Description |
|---|---|---|
--tag | latest | OCI artifact tag to install |
--skill | — | Install specific skill(s) only (repeatable) |
--agent | — | Install specific agent(s) only (repeatable) |
--verify | true | Verify cosign signature |
--verify-oidc-issuer | — | Expected OIDC issuer for verification |
--verify-oidc-subject-regex | — | Expected OIDC subject regex for verification |
--verify-trusted-root | — | Path to trusted_root.json |
# Install all skills from a repository
flux-operator skills install ghcr.io/org/flux-skills
# Install a specific tag
flux-operator skills install ghcr.io/org/flux-skills --tag v1.2.0
# Install only specific skills
flux-operator skills install ghcr.io/org/flux-skills \
--skill deployment-helper \
--skill troubleshooter
# Skip verification (not recommended)
flux-operator skills install ghcr.io/org/flux-skills --verify=falseList all installed skills and their sources.
flux-operator skills listNo additional flags. Shows each installed skill, its source repository, and version.
Check for updates and install them.
flux-operator skills update [flags]| Flag | Description |
|---|---|
--verify-trusted-root | Path to trusted_root.json for verification |
--dry-run | Check for updates without installing |
# Check and install updates
flux-operator skills update
# Dry run — see what would be updated
flux-operator skills update --dry-runRemove installed skills.
flux-operator skills uninstall <repository> [flags]| Flag | Description |
|---|---|
--all | Uninstall all skills from all repositories |
# Uninstall skills from a specific repository
flux-operator skills uninstall ghcr.io/org/flux-skills
# Uninstall everything
flux-operator skills uninstall --allPackage local skills and push them as an OCI artifact.
flux-operator skills publish <repository> [flags]| Flag | Default | Description |
|---|---|---|
--path | skills | Local directory containing skills to package |
--tag | — | OCI tag(s) to push (repeatable) |
--diff-tag | — | Tag to diff against (only publish changed skills) |
--annotation, -a | — | OCI annotations (repeatable, key=value) |
--sign | false | Sign the artifact with cosign |
-o, --output | — | Output format: json |
# Publish with a version tag
flux-operator skills publish ghcr.io/org/flux-skills --tag v1.0.0
# Publish with multiple tags
flux-operator skills publish ghcr.io/org/flux-skills \
--tag v1.0.0 --tag latest
# Publish from a custom directory
flux-operator skills publish ghcr.io/org/flux-skills \
--path ./my-skills --tag v1.0.0
# Sign the artifact
flux-operator skills publish ghcr.io/org/flux-skills \
--tag v1.0.0 --sign
# Only publish skills that changed since a previous tag
flux-operator skills publish ghcr.io/org/flux-skills \
--tag v1.1.0 --diff-tag v1.0.0
# Output publish metadata as JSON
flux-operator skills publish ghcr.io/org/flux-skills \
--tag v1.0.0 -o json