Not in the top 1,000 by GitHub stars
vmware-skills/VMware-VKS
MCP Skill + CLI for vSphere with Tanzu (VKS) — Supervisor, Namespace, and TanzuKubernetesCluster lifecycle management. Requires vSphere 8.x+.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/vmware-vks/SKILL.md
Week of Nov 2, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → a6d5bf39beef
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit a6d5bf39beefb235d161c3c3573f9a92a11b7e8b
git clone --filter=blob:none --no-checkout https://github.com/vmware-skills/VMware-VKS.git .hotskills/vmware-skills-vmware-vks && git -C .hotskills/vmware-skills-vmware-vks checkout --detach a6d5bf39beefb235d161c3c3573f9a92a11b7e8b
# Copy each selected skill directory from .hotskills/vmware-skills-vmware-vks into .claude/skills/<skill-name>/5GitHub stars
0stars in 7 days
1skill in this repository
60commits in 30 days
Heat
1.8- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- vmware-vks
skills/vmware-vks
How it works
vmware-vks
When your agent uses it
Use this skill whenever the user needs to manage vSphere Kubernetes Service (VKS) — Supervisor clusters, vSphere Namespaces, and TKC cluster lifecycle. Directly handles: check VKS compatibility, create/delete namespaces, create/scale/upgrade/delete TKC clusters, get kubeconfig, check Harbor registry. Always use this skill for "create Kubernetes cluster", "scale workers", "upgrade K8s version", "create namespace", "get kubeconfig", or any VKS/TKC task. Do NOT use for vanilla VM operations (use vmware-aiops), non-vSphere Kubernetes (e.g., kubeadm, EKS, AKS), or AVI/AKO load balancing (use vmware-avi). For networking use vmware-nsx.
What it loads into context
Frontmatter
542 tokensAlways available to the agent
SKILL.md
5,712 tokensWhen the skill is activated
Reference documents
10,828 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What This Skill Does
- Quick Install
- When to Use This Skill
- Related Skills — Skill Routing
- Common Workflows
- Architecture
- Usage Mode
- MCP Tools (25 — 16 read, 9 write)
- CLI Quick Reference
- Troubleshooting
- Prerequisites
- Setup
- Audit & Safety
- License
Files
../../.claude-plugin/plugin.jsonasset607 bytesSKILL.mdcore21,973 bytesSKILL.mdcore21,973 bytesSKILL.mdcore21,973 bytesSKILL.mdcore21,973 bytesSKILL.mdcore21,973 bytesSKILL.mdcore21,973 bytesSKILL.mdcore21,973 bytesevals/evals.jsonasset1,389 bytesreferences/agent-guardrails.mddoc9,348 bytesreferences/capabilities.mddoc12,206 bytesreferences/cli-reference.mddoc5,252 bytesreferences/setup-guide.mddoc16,367 bytes
Read SKILL.md
# VMware VKS
> Self-test: [guide](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md).
> **Disclaimer**: This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "vSphere" are trademarks of Broadcom. Source code is publicly auditable at [github.com/vmware-skills/VMware-VKS](https://github.com/vmware-skills/VMware-VKS) under the MIT license.
AI-powered VMware vSphere Kubernetes Service (VKS) management — 25 MCP tools.
> Requires vSphere 8.x+ with Workload Management enabled.
> **Companion skills**: [vmware-aiops](https://github.com/vmware-skills/VMware-AIops) (VM lifecycle), [vmware-monitor](https://github.com/vmware-skills/VMware-Monitor) (monitoring), [vmware-storage](https://github.com/vmware-skills/VMware-Storage) (storage), [vmware-nsx](https://github.com/vmware-skills/VMware-NSX) (NSX networking), [vmware-nsx-security](https://github.com/vmware-skills/VMware-NSX-Security) (DFW/firewall), [vmware-aria](https://github.com/vmware-skills/VMware-Aria) (metrics/alerts/capacity), [vmware-avi](https://github.com/vmware-skills/VMware-AVI) (AVI/ALB/AKO), [vmware-harden](https://github.com/vmware-skills/VMware-Harden) (compliance baselines).
> | [vmware-pilot](../vmware-pilot/SKILL.md) (workflow orchestration) | [vmware-policy](../vmware-policy/SKILL.md) (audit/policy)
## What This Skill Does
Skills included
- vmware-vks
Repository facts
- License
- MIT
- Created
- Mar 25, 2026
- Last pushed
- Nov 6, 2026
- Forks
- 1
- Open issues
- 2
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 6 notes
skills/vmware-vks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/vmware-vks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/vmware-vks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/vmware-vks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/vmware-vks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/vmware-vks/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- 1 broad permissionin 1 file: vmware-vks/SKILL.md:1
- No dangerous shell commands
- 35 network referencesin 5 files: vmware-vks/SKILL.md:12 .claude-plugin/plugin.json:1 vmware-vks/references/agent-guardrails.md:8 and 2 more
- No hidden or obfuscated text
- No instruction overrides
- No executable scripts
- 3 references to secretsin 2 files: vmware-vks/references/setup-guide.md:75 vmware-vks/SKILL.md:17
- No requests to vote in Hot
Show all 39 signals by file
.claude-plugin/plugin.json
- Network accessline 1
{ "$schema": "https://anthropic.com/claude-code/plugin.schema.json", - Network accessline 2
"$schema": "https://anthropic.com/claude-code/plugin.schema.json", - Network accessline 8
"name": "Wei Zhou", "email": "zhouwei008@gmail.com", "url": "https://github.com/vmware-skills" - Network accessline 9
"email": "zhouwei008@gmail.com", "url": "https://github.com/vmware-skills" }, - Network accessline 10
"url": "https://github.com/vmware-skills" - Network accessline 11
}, "homepage": "https://github.com/vmware-skills/VMware-VKS", "repository": "https://github.com/vmware-skills/VMware-VKS", - Network accessline 12
"homepage": "https://github.com/vmware-skills/VMware-VKS", - Network accessline 13
"repository": "https://github.com/vmware-skills/VMware-VKS",
skills/vmware-vks/SKILL.md
- Broad permissionsline 1
Bash - Network accessline 12
allowed-tools: - Bash metadata: {"openclaw":{"requires":{"anyBins":["vmware-vks","uvx"]},"optional":{"env":["VMWARE_VKS_CONFIG","VMWARE_VKS_<TARGET>_PASSWORD","VMWARE_VKS_<TARGET>_USERNAME","VMWARE_AUDIT_APPROVED_BY"],"bins":["vmware-poli - Network accessline 13
- Bash metadata: {"openclaw":{"requires":{"anyBins":["vmware-vks","uvx"]},"optional":{"env":["VMWARE_VKS_CONFIG","VMWARE_VKS_<TARGET>_PASSWORD","VMWARE_VKS_<TARGET>_USERNAME","VMWARE_AUDIT_APPROVED_BY"],"bins":["vmware-policy"]},"homepage": - Network accessline 14
metadata: {"openclaw":{"requires":{"anyBins":["vmware-vks","uvx"]},"optional":{"env":["VMWARE_VKS_CONFIG","VMWARE_VKS_<TARGET>_PASSWORD","VMWARE_VKS_<TARGET>_USERNAME","VMWARE_AUDIT_APPROVED_BY"],"bins":["vmware-policy"]},"homepage":"https: - Access to secretsline 17
[Credential-related source omitted] - Network accessline 22
> Self-test: [guide](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md). - Network accessline 24
> **Disclaimer**: This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "vSphere" are trademarks of Broadcom. Source code is publicly audit - Network accessline 28
> Requires vSphere 8.x+ with Workload Management enabled. > **Companion skills**: [vmware-aiops](https://github.com/vmware-skills/VMware-AIops) (VM lifecycle), [vmware-monitor](https://github.com/vmware-skills/VMware-Monitor) (monitoring), - Network accessline 29
> **Companion skills**: [vmware-aiops](https://github.com/vmware-skills/VMware-AIops) (VM lifecycle), [vmware-monitor](https://github.com/vmware-skills/VMware-Monitor) (monitoring), [vmware-storage](https://github.com/vmware-skills/VMware-S - Network accessline 268
**TKC kubeconfig on VCF 9.1:** One live report found that `issue_tkc_kubeconfig` embeds the Supervisor JWT and the guest TKC API rejects it with 401 ([issue #27](https://github.com/vmware-skills/VMware-VKS/issues/27)). `preflight-auth` chec - Network accessline 318
MIT — [github.com/vmware-skills/VMware-VKS](https://github.com/vmware-skills/VMware-VKS)
skills/vmware-vks/references/agent-guardrails.md
- Network accessline 8
This page exists because an operator wrote those rules by hand first. The guardrails below are adapted, with thanks, from the working configuration [@juanpf-ha](https://github.com/juanpf-ha) developed while running - Network accessline 9
guardrails below are adapted, with thanks, from the working configuration [@juanpf-ha](https://github.com/juanpf-ha) developed while running vmware-monitor and vmware-aria against a production vSphere estate with Llama - Network accessline 10
[@juanpf-ha](https://github.com/juanpf-ha) developed while running - Network accessline 11
vmware-monitor and vmware-aria against a production vSphere estate with Llama 3.3 70B FP8 on an on-prem H100 ([VMware-AIops#31](https://github.com/vmware-skills/VMware-AIops/issues/31)). The - Network accessline 12
3.3 70B FP8 on an on-prem H100 ([VMware-AIops#31](https://github.com/vmware-skills/VMware-AIops/issues/31)). The cross-skill rules are identical across this family; the parts below marked - Network accessline 13
([VMware-AIops#31](https://github.com/vmware-skills/VMware-AIops/issues/31)). The - Network accessline 139
Qwen, Mistral, Granite, or anything else — a report of what worked and what did not is genuinely useful: [github.com/vmware-skills/VMware-VKS/issues](https://github.com/vmware-skills/VMware-VKS/issues). - Network accessline 141
[github.com/vmware-skills/VMware-VKS/issues](https://github.com/vmware-skills/VMware-VKS/issues).
skills/vmware-vks/references/capabilities.md
- Network accessline 118
|----------------|---------|---------| | 8.0 / 8.0U1-U3 | `cluster.x-k8s.io/v1beta1` (ClusterClass) | Full | | 9.0 / 9.1 (VCF 9) | `cluster.x-k8s.io/v1` preferred (auto-detected), `v1beta1` fallback | ⚠ Partial external 9.1 report — Supervi - Network accessline 119
| 8.0 / 8.0U1-U3 | `cluster.x-k8s.io/v1beta1` (ClusterClass) | Full | | 9.0 / 9.1 (VCF 9) | `cluster.x-k8s.io/v1` preferred (auto-detected), `v1beta1` fallback | ⚠ Partial external 9.1 report — Supervisor login works at the Supervisor endpo - Network accessline 120
| 9.0 / 9.1 (VCF 9) | `cluster.x-k8s.io/v1` preferred (auto-detected), `v1beta1` fallback | ⚠ Partial external 9.1 report — Supervisor login works at the Supervisor endpoint, but the guest TKC API rejected this skill's kubeconfig with 401 (
skills/vmware-vks/references/setup-guide.md
- Network accessline 7
All install methods fetch from the same source: [github.com/vmware-skills/VMware-VKS](https://github.com/vmware-skills/VMware-VKS) (MIT licensed). We recommend reviewing the source code before installing. - Network accessline 43
git clone --branch v3.5.0 https://github.com/vmware-skills/VMware-VKS.git - Network accessline 52
|---------|---------|-------| | 8.0 / 8.0U1-U3 | Full | Workload Management APIs available; TKC uses `cluster.x-k8s.io/v1beta1`. | | 9.0 / 9.1 (VCF 9) | ⚠ Partial external 9.1 report | A 9.1 lab confirmed Supervisor `/wcp/login` at the Supe - Network accessline 53
| 8.0 / 8.0U1-U3 | Full | Workload Management APIs available; TKC uses `cluster.x-k8s.io/v1beta1`. | | 9.0 / 9.1 (VCF 9) | ⚠ Partial external 9.1 report | A 9.1 lab confirmed Supervisor `/wcp/login` at the Supervisor endpoint; its guest TKC - Network accessline 54
| 9.0 / 9.1 (VCF 9) | ⚠ Partial external 9.1 report | A 9.1 lab confirmed Supervisor `/wcp/login` at the Supervisor endpoint; its guest TKC API rejected this skill's kubeconfig with 401 ([#27](https://github.com/vmware-skills/VMware-VKS/iss - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Network accessline 155
[Credential-related source omitted] - Network accessline 238
1. **Source Code** -- MIT-licensed, fully auditable. No obfuscated logic. Source at [github.com/vmware-skills/VMware-VKS](https://github.com/vmware-skills/VMware-VKS). The `uv` installer fetches the `vmware-vks` package from PyPI, which is
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 31 facts
- Broad permissions in the frontmatter of the SKILL.mdvmware-vks/SKILL.md:1High confidence
- Network access in the frontmatter of the SKILL.mdvmware-vks/SKILL.md:12Low confidence
- Network access in the frontmatter of the SKILL.mdvmware-vks/SKILL.md:13Low confidence
- Network access in the frontmatter of the SKILL.mdvmware-vks/SKILL.md:14Low confidence
- Access to secrets in the frontmatter of the SKILL.md: a variable, placeholder or call, not a stored valuevmware-vks/SKILL.md:17Low confidence
- Network access in prose of the SKILL.mdvmware-vks/SKILL.md:22Low confidence
- Network access in prose of the SKILL.mdvmware-vks/SKILL.md:24Low confidence
- Network access in prose of the SKILL.mdvmware-vks/SKILL.md:28Low confidence
- Network access in prose of the SKILL.mdvmware-vks/SKILL.md:29Low confidence
- Network access in prose of the SKILL.mdvmware-vks/SKILL.md:268Low confidence
- Network access in prose of the SKILL.mdvmware-vks/SKILL.md:318Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:8Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:9Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:10Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:11Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:12Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:13Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:139Low confidence
- Network access in prose of documentationvmware-vks/references/agent-guardrails.md:141Low confidence
- Network access in prose of documentationvmware-vks/references/capabilities.md:118Low confidence
- Network access in prose of documentationvmware-vks/references/capabilities.md:119Low confidence
- Network access in prose of documentationvmware-vks/references/capabilities.md:120Low confidence
- Network access in prose of documentationvmware-vks/references/setup-guide.md:7Low confidence
- Network access in code of documentationvmware-vks/references/setup-guide.md:43Low confidence
- Network access in prose of documentationvmware-vks/references/setup-guide.md:52Low confidence
- Network access in prose of documentationvmware-vks/references/setup-guide.md:53Low confidence
- Network access in prose of documentationvmware-vks/references/setup-guide.md:54Low confidence
- Access to secrets in code of documentationvmware-vks/references/setup-guide.md:75Low confidence
- Access to secrets in code of documentationvmware-vks/references/setup-guide.md:76Low confidence
- Network access in prose of documentationvmware-vks/references/setup-guide.md:155Low confidence
- Network access in prose of documentationvmware-vks/references/setup-guide.md:238Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/plugin.json | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/vmware-vks/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/vmware-vks/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/vmware-vks/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/vmware-vks/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/vmware-vks/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
