Kubeshark plugin for Grok Build

Community Claude Code plugin, installs in GrokPluginSecurity

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

How to install Kubeshark in Grok Build

grok plugin install kubeshark/kubeshark --trust
✓ Install-checked in Grok Buildchecked Oct 18, 2026

Review before you trust it. --trust lets this plugin's hooks, MCP servers and scripts run code on your computer. It's a community repo that neither xAI nor GrokStacks has reviewed, so read its code first.

We install this repo directly: Grok Build 1.0.62 can't install it through its own marketplace file. Then start a new Grok session, or press r in /plugins, to load it.

Command format: Grok Build's plugin guide

Runs a local MCP server (with npx, uvx or similar), so that tool needs to be installed, for example Node.js for npx.

What we checked: on Oct 18, 2026 it installed with grok 1.0.62 and Grok found 4 skills. That's an install check only: we haven't run it in a live Grok session.

What it contains

Skills (4)

  • install — Kubeshark installation and deployment skill. Use this skill whenever the user wants to install Kubeshark, deploy Kubeshark to a Kubernetes cluster, set up Kubeshark, configure Kubeshark helm values, generate a Kubeshark config file, customi
  • kfl — KFL2 (Kubeshark Filter Language) reference. This skill MUST be loaded before writing, constructing, or suggesting any KFL filter expression. KFL is statically typed — incorrect field names or syntax will fail silently or error. Do not guess
  • network-rca — Kubernetes network root cause analysis skill powered by Kubeshark MCP. Use this skill whenever the user wants to investigate past incidents, perform retrospective traffic analysis, take or manage traffic snapshots, extract PCAPs, dissect L7
  • security-audit — Kubernetes network security audit skill powered by Kubeshark MCP. Use this skill whenever the user wants to audit a cluster for security threats, detect compromised workloads, find malicious traffic patterns, hunt for indicators of compromi

MCP servers (1)

  • kubeshark — stdio server

About this listing

Kubeshark is a community plugin on GitHub by kubeshark, written as a Claude Code plugin that Grok Build installs. We install-checked it in Grok; we haven't run it in a live session or reviewed its code. When we installed it, Grok found 4 skills, 1 MCP server. Its license is Apache-2.0. We checked commit e27687a8ed41. It's one of 79 listings in the Security category on GrokStacks.

Stacks Weekly: every new Grok Build and Codex plugin, every Tuesday.

One short email for GrokStacks and CodexStacks readers, with each new plugin's install line and what it ships. Subscribe and get the free starter list: 20 Grok Build plugins worth installing first.

You'll get a confirmation email first. Unsubscribe anytime.

Kubeshark FAQ

How do I install Kubeshark in Grok Build?

Run grok plugin install kubeshark/kubeshark --trust. We install-checked this command in Grok Build. We install this repo directly: Grok Build 1.0.62 can't install it through its own marketplace file. Then start a new Grok session, or press r in /plugins, to load it.

Is Kubeshark an official Grok Build plugin?

No. Kubeshark is a community plugin on GitHub by kubeshark, not in xAI's official Grok Build marketplace. We checked that it installs and what Grok loads from it, but haven't run it in a live Grok session or reviewed its code.

What does Kubeshark include?

According to what Grok loaded in our install check, Kubeshark includes 4 skills, 1 MCP server: install, kfl, network-rca, security-audit, kubeshark.

Details

Type
Plugin
Category
Security
Source
Community Claude Code plugin, installs in Grok
License
Apache-2.0
Author
kubeshark
Version
1.0.0
Keywords
cloud-native, devops, docker, ebpf, golang, grpc, incident-response, kubernetes, mcp, network-analysis, network-engineering, network-observability
Source repo
https://github.com/kubeshark/kubeshark
Checked commit
e27687a8ed41
Homepage
https://kubeshark.com
Checked by GrokStacks
Install-checked in Grok Build on Oct 18, 2026; not run in a live session

Something wrong or missing? Submit or improve this listing. Marketplace listings also refresh automatically every night.

For maintainers: badge and embeds

Maintain Kubeshark? Add the badge; it links to this page.

Listed on GrokStacks

Markdown

[![Listed on GrokStacks](https://grokstacks.com/badge.svg)](https://grokstacks.com/p/kubeshark/)

HTML

<a href="https://grokstacks.com/p/kubeshark/"><img src="https://grokstacks.com/badge.svg" alt="Listed on GrokStacks" width="164" height="28"></a>

Embed card (static HTML and inline CSS, no JavaScript). Preview:

KubesharkCommunity plugin for Grok Build · 4 skills, 1 MCP servereBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without…View on GrokStacks →
<a href="https://grokstacks.com/p/kubeshark/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #2a2e3c;border-radius:12px;background:#0a0b0f;color:#e8eaf0;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#e8eaf0">Kubeshark</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#9aa0b1">Community plugin for Grok Build · 4 skills, 1 MCP server</span><span style="display:block;margin:0 0 10px;color:#c9cdd8">eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without…</span><span style="font-size:12px;font-weight:600;color:#7c9cff">View on GrokStacks →</span></a>

Markdown summary

**[Kubeshark on GrokStacks](https://grokstacks.com/p/kubeshark/)**: Community plugin for Grok Build with 4 skills, 1 MCP server. Install: `grok plugin install kubeshark/kubeshark --trust`

More on badges, embeds and keeping your listing up to date: GrokStacks for plugin authors.

Also in Security

Aaron Marketing Skills

120 marketing skills as an AI marketing staff — plugin, portable skills, or an 8-bot team across 7 disciplines (narrative, SEO/GEO, social, email, paid, influencer, launch) on one contract, with 8 auditor gates: TALE · CORE-EEAT · CITE · ECHO · SEND · ROAS · STAR · RAMP.

Community Claude Code plugin, installs in GrokPluginSecurity

Adrian

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

Community Claude Code plugin, installs in GrokPluginSecurity

Agent Beacon

The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu

Community Claude Code plugin, installs in GrokPluginSecurity

Agent Governance Toolkit

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Community Claude Code plugin, installs in GrokPluginSecurity

Agentguard

Security guard for AI agents — blocks malicious skills, prevents data leaks, protects secrets. 24 detection rules, runtime action evaluation, trust registry.

Community Claude Code plugin, installs in GrokPluginSecurity

Android Reverse Engineering Skill

Claude Code skill to support Android app's reverse engineering

Community Claude Code plugin, installs in GrokPluginSecuritySecurity tool

All 79 security listings →