obolnetwork/obol-stack
internal/embed/skills/obol-stack/SKILL.md
Monitor the Kubernetes cluster running the Obol Stack. Use when asked about pod status, logs, services, events, deployments, or diagnosing issues. Read-only access to own namespace via ServiceAccount.
$ install --global
skillsauthnpx skillsauth add obolnetwork/obol-stack obol-stackInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 6:04 AM5.3s2 files scanned
SKILL.md
- name:
- obol-stack
- description:
- Monitor the Kubernetes cluster running the Obol Stack. Use when asked about pod status, logs, services, events, deployments, or diagnosing issues. Read-only access to own namespace via ServiceAccount.
- metadata:
- { "openclaw": { "emoji": "☸️", "requires": { "bins": ["curl", "python3"] } } }
Obol Stack
Monitor the Kubernetes environment running the Obol Stack. Check pod status, read logs, list services, view events, and diagnose issues.
When to Use
- Checking what pods are running and their status
- Reading pod logs
- Listing services and their ports
- Viewing warning events
- Diagnosing crashes, restarts, or scheduling issues
When NOT to Use
- Cross-namespace operations (scoped to own namespace only)
- Creating or modifying resources (read-only)
- Ethereum RPC queries — use
ethereum-networks - Validator monitoring — use
distributed-validators
Quick Start
# List pods with status
python3 scripts/kube.py pods
# Get pod logs
python3 scripts/kube.py logs <pod-name>
# Recent warning events
python3 scripts/kube.py events --type Warning
# List services
python3 scripts/kube.py services
# Deployment status
python3 scripts/kube.py deployments
# Full details of a resource
python3 scripts/kube.py describe pod <pod-name>
Available Commands
| Command | What it shows |
|---------|--------------|
| pods | All pods with status, restarts, and age |
| logs <pod> [--tail N] | Pod logs (default 100 lines) |
| events [--type Warning] | Namespace events, optionally filtered |
| services | Services with type, IP, and ports |
| deployments | Deployments with ready/desired replica counts |
| configmaps | ConfigMaps with key counts |
| describe <type> <name> | Full JSON detail for any resource |
Supported types for describe: pod, service, deployment, configmap, event, pvc, statefulset, job, cronjob, replicaset.
Troubleshooting
Pod won't start
python3 scripts/kube.py pods— check statuspython3 scripts/kube.py events --type Warning— look for errorspython3 scripts/kube.py describe pod <name>— check conditions
Pod keeps restarting
- Check restart count with
pods - Read logs with
logs <pod>— look at output before the crash - If status shows
OOMKilled, the pod needs more memory
Service not reachable
services— verify it exists and check portspods— verify backing pods are Runningdescribe service <name>— check endpoints
Pod Status Reference
| Status | Meaning |
|--------|---------|
| Running | Normal operation |
| Pending | Waiting to be scheduled |
| CrashLoopBackOff | Crashing repeatedly — check logs |
| ImagePullBackOff | Can't pull container image |
| OOMKilled | Out of memory |
Constraints
- Read-only — cannot create, modify, or delete resources
- Own namespace only — cannot see other namespaces
- No kubectl — uses the Kubernetes API directly via Python urllib
- Shell is
sh, notbash— do not use bashisms - Python stdlib only —
kube.pyuses Python 3.11 stdlib (no third-party packages)
See Also
ethereum-networks— blockchain RPC queries via eRPCdistributed-validators— DVT cluster monitoring via Obol API
Related Skills
obolnetwork/agent-factory
data-ai
VerifiedTrustedCommunity
Spawn durable child Hermes agents from inside Obol Stack. Creates child namespaces, optional profile/env Secrets, Agent CRDs, and optional ServiceOffers for x402-paid child services.
9SKILL.mdUpdated May 22, 2026
obolnetwork/buy-x402
data-ai
VerifiedTrustedCommunity
Buy from any x402-gated endpoint. Two flows: `pay` for one-shot HTTP services (single auth, no sidecar), and `buy` for long-running paid inference budgets (pre-signed batch via PurchaseRequest, exposed as `paid/<remote-model>`). Supports USDC (EIP-3009) and OBOL (Permit2). Zero signer access at runtime — spending is capped by design.
9SKILL.mdUpdated May 2, 2026
obolnetwork/sell
testing
VerifiedTrustedCommunity
Sell access to services via x402 payment gating. Create ServiceOffer CRDs that automatically health-check upstreams, create payment-gated routes, and optionally pull models and register on ERC-8004. Supports inference, HTTP, and fine-tuning service types.
9SKILL.mdUpdated Apr 20, 2026
obolnetwork/monetize-guide
testing
VerifiedTrustedCommunity
End-to-end guide for monetizing GPU resources or HTTP services through obol-stack. Covers pre-flight checks, model detection, pricing research, selling via x402, ERC-8004 registration, and verification. Use this skill when the user wants to monetize their machine.
9SKILL.mdUpdated Apr 20, 2026