armoctl-network-policies
Generated NetworkPolicies — list discovered policies and generate one for a workload from observed traffic. Use to harden cluster network egress/ingress.
Install
With your agent
Install OMGSkills skill "armosec/armoctl:skills/armoctl-network-policies" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/armosec/armoctl /tmp/armoctl && ln -s /tmp/armoctl/skills/armoctl-network-policies ~/.claude/skills/armoctl-network-policiesFrom README
armoctl-network-policies ARMO observes runtime traffic and emits a least-privilege NetworkPolicy YAML for any selected workload. List shows historical policies; generate produces one on-demand. Commands fields — Print the network policies resource cheatsheet generate — Generate network policies for specified workloads Flags: --wlid (stringSlice) Workload ID (repeatable, required) list — List network policies Resource fields policies | Field | Description | |---|---| | name | Policy name. | | namespace | Kubernetes namespace. | | cluster | Cluster name. | | kind | NetworkPolicy kind. | | creationTimestamp | RFC3339 creation. | Field semantics kind — NetworkPolicy kind. Use 'inventory unique-values kind' to verify the workload kind name before generating a policy for it. Recipes Generate a network policy for a workload
More from this repo
armoctl
ARMO security platform CLI — JSON-first agent-friendly access to runtime incidents, vulnerabilities, posture, risks,...
armoctl-attack-chains
Attack chains — multi-step kill-chain views built by ARMO from runtime + posture signal.
armoctl-cloud-accounts
Cloud account onboarding — list/connect/disconnect ECS accounts.