service-mesh-expert – Coding skill for AI agents
Review Istio or Linkerd topology, traffic policies, mTLS, observability and multi-cluster operations within an authorized environment.
Install the service-mesh-expert skill with one command
Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.
Claude Code
mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/service-mesh-expert-64b27.tgz | tar xz -C ~/.claude/skills
Call it in Claude Code: /service-mesh-expert – then describe the task you want done.
Codex
mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/service-mesh-expert-64b27.tgz | tar xz -C ~/.codex/skills
Call it in Codex: $service-mesh-expert – then describe the task you want done.
Hermes Agent
mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/service-mesh-expert-64b27.tgz | tar xz -C ~/.hermes/skills
Call it in Hermes Agent: /service-mesh-expert – then describe the task you want done.
DeepSeek
mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/service-mesh-expert-64b27.tgz | tar xz -C ~/.deepcode/skills
Call it in DeepSeek: /service-mesh-expert – then describe the task you want done.
SKILL.md content
Service Mesh Expert
Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh configurations. Use PROACTIVELY for service mesh architecture, zero-trust networking, or microservices communication patterns.
Do not use this skill when
- The task is unrelated to service mesh expert
- You need a different domain or tool outside this scope
Instructions
- Clarify goals, constraints, and required inputs.
- Apply relevant best practices and validate outcomes.
- Provide actionable steps and verification.
Capabilities
- Istio and Linkerd installation, configuration, and optimization
- Traffic management: routing, load balancing, circuit breaking, retries
- mTLS configuration and certificate management
- Service mesh observability with distributed tracing
- Multi-cluster and multi-cloud mesh federation
- Progressive delivery with canary and blue-green deployments
- Security policies and authorization rules
Use this skill when
- Implementing service-to-service communication in Kubernetes
- Setting up zero-trust networking with mTLS
- Configuring traffic splitting for canary deployments
- Debugging service mesh connectivity issues
- Implementing rate limiting and circuit breakers
- Setting up cross-cluster service discovery
Workflow
1. Assess current infrastructure and requirements
2. Design mesh topology and traffic policies
3. Implement security policies (mTLS, AuthorizationPolicy)
4. Configure observability (metrics, traces, logs)
5. Set up traffic management rules
6. Test failover and resilience patterns
7. Document operational runbooks
Best Practices
- Preserve existing strict mTLS. Use a scoped permissive migration only when explicitly justified and authorized, with a rollback plan and tests for rejected plaintext traffic
- Use namespaces for policy isolation
- Implement circuit breakers before they're needed
- Monitor mesh overhead (latency, resource usage)
- Keep sidecar resources appropriately sized
- Use destination rules for consistent load balancing
Example
User request:
> Implement service-to-service communication in Kubernetes.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related skills
- session-handoff – Use when context approaches capacity, before /clear or /compact, when switching tasks…
- shader-programming-glsl – Expert guide for writing efficient GLSL shaders (Vertex/Fragment) for web and game…
- sharp-coder – Two-layer performance skill combining disciplined THINK layer (surgical edits…
- shodan-reconnaissance – Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during…
- shopify-apps – Expert patterns for Shopify app development including Remix/React Router apps, embedded…
- shopify-development – Build Shopify apps, extensions, themes using GraphQL Admin API, Shopify CLI, Polaris UI…
- shopify-review-triage – Turn public 1-3-star Shopify App Store review rows into a P0-P3 triage brief: incident…
- simplify-code – Review a diff for clarity and safe simplifications, then optionally apply low-risk fixes.