Install
$ agentstack add skill-joaquimscosta-arkhe-claude-plugins-tilt-setup Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Tilt Setup
Install Tilt and scaffold or audit Tiltfile + tilt/ configurations for local Kubernetes development with ecosystem-aware templates.
Pre-flight
Run the detection script to understand current state:
python3 ${CLAUDE_SKILL_DIR}/scripts/detect_tilt.py
The detector reports: tilt/kubectl binaries, current kubectl context (with production-pattern matching), existing Tiltfile and tilt/ modular layout (also recognizes legacy .tilt/), .tiltignore, tilt_config.json, ecosystems detected (Java/Gradle, Next.js, Python, infra), local cluster tools available, and audit violations (TILT001–TILT025) when a Tiltfile exists.
Decision Flow
Run detector
|
├── tilt_binary.installed = false → Install Tilt first
|
├── kubectl_context.is_production_pattern = true → STOP and warn user
|
├── tiltfile.exists = true → Phase 1: Audit
|
└── tiltfile.exists = false → Phase 2: Scaffold
Phase 1: Audit (Existing Tiltfile)
- Summarize findings — show a status table:
| Component | Status | Detail | |-----------|--------|--------| | tilt binary | installed/missing | version, path | | kubectl context | safe/production | current context, classification | | Tiltfile | found/not found | path, line count | | Modular layout | yes/no | tilt/ files (config.star, services.star, *.yaml) | | Ecosystems | N detected | java-gradle, nextjs, python, infra | | Service count | N services | k8s_resource calls | | Safety guard | yes/no | allow_k8s_contexts or manual guard | | .tiltignore | yes/no | path |
- Present audit violations grouped by severity (ERROR > WARNING > INFO):
- Show rule ID, message, fix hint
- Rules cover: missing safety guard, deprecated
restart_container, missinglive_update, nowatch_settings, noupdate_settings, missingresource_deps/labels/port_forwards, monolithic Tiltfile, etc.
- Use
AskUserQuestion(multiSelect: true) — ask which violations to fix.
- Apply selected fixes — see [WORKFLOW.md](WORKFLOW.md) for per-rule fix strategies.
- Re-run detector to verify fixes were applied.
Phase 2: Scaffold (No Tiltfile)
- Install
tiltif missing — show commands based onosfield:
- macOS:
brew install tilt-dev/tap/tilt - Linux:
curl -fsSL https://raw.githubusercontent.com/tilt-dev/tilt/master/scripts/install.sh | bash - Verify:
tilt version
- Verify kubectl context is safe — if
kubectl_context.is_production_patternis true, STOP and ask the user to switch contexts before proceeding.
- Review detected ecosystems — show what was found.
- Choose Tiltfile pattern — use
AskUserQuestion:
- Single-file (
Tiltfileonly) — recommended for 1–3 services, single ecosystem - Modular (
Tiltfile+tilt/config.star+tilt/services.star+tilt/service-config.yaml+tilt/environments.yaml) — recommended for 4+ services, 2+ ecosystems, or 2+ environment presets
- Choose features — use
AskUserQuestion(multiSelect: true):
| Feature | When to enable | |---------|----------------| | Manual context guard | Always (recommended over allow_k8s_contexts alone) | | PVC persistence toggle | Stateful services (postgres, kafka, opensearch) | | JDWP debug ports | Java/Spring Boot services | | Monitoring stack | Prometheus + Grafana via helm_resource | | Traefik gateway | Multi-service projects with HTTP routing |
- Generate Tiltfile + supporting files — see [WORKFLOW.md](WORKFLOW.md) for templates.
Always include in the root Tiltfile:
- Manual
validate_cluster_safety()guard at top (blocksarn:aws:eks:,gke_,prod,production,staging) watch_settings(ignore=[...])with build artifacts and dep dirsupdate_settings(max_parallel_updates=2)for laptop-friendly CPU usage.tiltignorenext to Tiltfile
- Verify — run
tilt alpha tiltfile-resultto validate syntax, then re-run detector.
Key Rules
- Never overwrite existing
Tiltfileortilt/files without asking. Offer merge/replace/skip. - Detect first — skip steps already configured.
- Use
AskUserQuestionfor every decision. Do not assume user preferences. - Always start with safety guard — refuse to scaffold without one. The cost of accidental prod deployment is too high.
- Use
ext://restart_processnotrestart_container()— the latter is deprecated. - Load extensions only from root Tiltfile — Starlark
load()ofext://from sub-files fails. - Externalize service definitions to YAML for modular layouts —
read_yaml("tilt/service-config.yaml")keeps config team-editable. - PVC persistence pattern — create persistent PVCs via
local("kubectl apply")outside Tilt's lifecycle so they survivetilt down. - Per-ecosystem live_update:
- Spring Boot:
custom_build+local_resourcecompile +syncof.classfiles - Next.js:
local_resourcewithserve_cmd(preferred) OR container withWATCHPACK_POLLING=true - Python:
docker_build+sync+ uvicorn--reload(norestart_containerneeded)
Reference Material
The skill's reference base lives at docs/research/tilt-local-kubernetes-development-setup.md (in this repo). It contains the full Tilt API reference, ecosystem recipes, cluster comparison, audit rule definitions (TILT001–TILT025), and scaffold templates.
References
- Workflow: See [WORKFLOW.md](WORKFLOW.md) for detailed per-step flows and templates
- Examples: See [EXAMPLES.md](EXAMPLES.md) for example setup and audit sessions
- Troubleshooting: See [TROUBLESHOOTING.md](TROUBLESHOOTING.md) for common issues
- Detection Script: See [scripts/detecttilt.py](scripts/detecttilt.py) for detection logic
- Research base:
docs/research/tilt-local-kubernetes-development-setup.md
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: joaquimscosta
- Source: joaquimscosta/arkhe-claude-plugins
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.