← Control PlaneCONTENT HISTORY

Update to Control Plane

Snapshot Oct 28, 2026 · 18:00 UTC · version 1.1.0

WHAT CHANGED

Declared capabilities changed

Declared skills — Now says: [{"description":"Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts,...

Observed in instructions or declared skills. Runtime behavior has not been tested.

Save Control Plane and check future changes in Following.

Up to 10 plugins free · no card required.

All fields and original values.

Declared skills

Before

Oct 24, 2026 · 12:40 UTC

[{"description":"Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or I...

After

Oct 28, 2026 · 18:00 UTC

[{"description":"Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or I...

Full description

Before

Oct 24, 2026 · 12:40 UTC

runs containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware as one platform. Build a GitHub or a GitLab repo into a container and deploy it to a live HTTPS URL, give it a custom domain, attach Postgres or Redis, a...

After

Oct 28, 2026 · 18:00 UTC

skills, operating rules, and MCP server for building, deploying, and running containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware.

Short description

Before

Oct 24, 2026 · 12:40 UTC

Deploy and run cloud apps

After

Oct 28, 2026 · 18:00 UTC

Build and deploy apps

Long description

Before

Oct 24, 2026 · 12:40 UTC

Build a GitHub or a GitLab repo into a container and deploy it to a live HTTPS URL, give it a custom domain, attach Postgres or Redis, and let it autoscale. Diagnose failures from logs, metrics, and events, and find the over-provisioned ...

After

Oct 28, 2026 · 18:00 UTC

Describe an app and the assistant writes, builds, and deploys it to a live HTTPS URL, or builds one from your GitHub or GitLab repository. For an app that keeps records, files, or sign-ins, it plans the database, storage, and sign-in wit...

Compare saved observations

Download comparison JSON
Full technical diff · 18 changed fields

removed /release/app_manifest/apps/app-6a3345aed5b081918ae752ac49e4df0e

BEFORE
{
  "id": "asdk_app_6a3345aed5b081918ae752ac49e4df0e",
  "required": true
}
AFTER
Field is absent

added /release/app_manifest/apps/cpln

BEFORE
Field was absent
AFTER
{
  "id": "asdk_app_6a3345aed5b081918ae752ac49e4df0e",
  "required": true
}

changed /release/description

BEFORE
"Control Plane runs containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware as one platform. Build a GitHub or a GitLab repo into a container and deploy it to a live HTTPS URL, give it a custom domain, attach Postgres or Redis, and let it autoscale. Diagnose failures from logs, metrics, and events, and find the over-provisioned workloads inflating your cloud bill."
AFTER
"Control Plane skills, operating rules, and MCP server for building, deploying, and running containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware."

changed /release/id

BEFORE
"pluginrel_ba33011555248191a6c850d196d109ec"
AFTER
"pluginrel_be0658defe788191b8841205f871c0a7"

changed /release/interface/brand_color

BEFORE
null
AFTER
"#1563FF"

changed /release/interface/capabilities

BEFORE
[]
AFTER
[
  "Read",
  "Write"
]

changed /release/interface/composer_icon_dark_url

BEFORE
"https://files.openai.com/content?id=file_00000000bfcc82089344849f93dcfe10"
AFTER
null

changed /release/interface/composer_icon_url

BEFORE
"https://files.openai.com/content?id=file_00000000bfcc82089344849f93dcfe10"
AFTER
"https://files.openai.com/content?id=file_0000000081d88243ab9e2b35f74f1ab4"

changed /release/interface/default_prompt

BEFORE
"Build this GitHub repo and deploy it, then give me the live URL"
AFTER
"Build and deploy a simple web app for me on Control Plane."

changed /release/interface/default_prompts

BEFORE
[
  "Build this GitHub repo and deploy it, then give me the live URL",
  "Diagnose why my workload won't start and fix it",
  "Which of my workloads are over-provisioned, and what would right-sizing save?"
]
AFTER
[
  "Build and deploy a simple web app for me on Control Plane.",
  "Why is my workload not starting? Check its logs and events.",
  "Add a Postgres database my app can connect to."
]

changed /release/interface/logo_url

BEFORE
"https://files.openai.com/content?id=file_000000002cf88211b6744d98794c064a"
AFTER
"https://files.openai.com/content?id=file_00000000bbec81f4b34a481bbee0a41c"

changed /release/interface/logo_url_dark

BEFORE
"https://files.openai.com/content?id=file_00000000c45c8208802c9bbb0e6862af"
AFTER
null

changed /release/interface/long_description

BEFORE
"Control Plane runs containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware as one platform. Build a GitHub or a GitLab repo into a container and deploy it to a live HTTPS URL, give it a custom domain, attach Postgres or Redis, and let it autoscale. Diagnose failures from logs, metrics, and events, and find the over-provisioned workloads inflating your cloud bill."
AFTER
"Control Plane runs containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware as one platform. Describe an app and the assistant writes, builds, and deploys it to a live HTTPS URL, or builds one from your GitHub or GitLab repository. For an app that keeps records, files, or sign-ins, it plans the database, storage, and sign-in with you before writing any code. Give an app a custom domain, add PostgreSQL, MySQL, MariaDB, MongoDB, or Redis, and let it autoscale. Diagnose failures from logs, events, metrics, and traces, then restart, roll back, or promote a workload, and compare used against reserved CPU and memory to find the over-provisioned workloads inflating your cloud bill. Workloads reach AWS, GCP, and Azure through your registered cloud accounts without stored keys, and you can install services from the Template Catalog and export your setup to Terraform. The plugin acts only on the organizations you grant when you connect, and secret values are generated by Control Plane or entered by you in the Control Plane Console, never in the chat."

changed /release/interface/short_description

BEFORE
"Deploy and run cloud apps"
AFTER
"Build and deploy apps"

changed /release/interface/website_url

BEFORE
"https://controlplane.com"
AFTER
"https://docs.controlplane.com/ai/plugin"

changed /release/keywords

BEFORE
[]
AFTER
[
  "controlplane",
  "cpln",
  "multi-cloud",
  "kubernetes",
  "workloads",
  "deploy",
  "containers",
  "networking",
  "secret-access",
  "autoscaling"
]

changed /release/skills

BEFORE
[
  {
    "description": "Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or IAM.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "access-control",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or IAM."
    },
    "name": "access-control",
    "plugin_release_skill_id": "pluginrsk_6a88189eff448191809823b205af464e"
  },
  {
    "description": "Audit trail and compliance on Control Plane. Use when the user asks about audit logs, who changed what, change tracking, audit contexts, writing custom audit events, security monitoring, SOC 2, HIPAA, or PCI compliance.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "audit-compliance",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Audit trail and compliance on Control Plane. Use when the user asks about audit logs, who changed what, change tracking, audit contexts, writing custom audit events, security monitoring, SOC 2, HIPAA, or PCI compliance."
    },
    "name": "audit-compliance",
    "plugin_release_skill_id": "pluginrsk_6a88189f256c8191b9c3b5c02be83627"
  },
  {
    "description": "Workload autoscaling and Capacity AI on Control Plane. Use when the user asks about scaling up/down, min/max replicas, scale-to-zero, concurrency/RPS/CPU/memory/latency scaling, KEDA, event-driven scaling, or right-sizing.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "autoscaling-capacity",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Workload autoscaling and Capacity AI on Control Plane. Use when the user asks about scaling up/down, min/max replicas, scale-to-zero, concurrency/RPS/CPU/memory/latency scaling, KEDA, event-driven scaling, or right-sizing."
    },
    "name": "autoscaling-capacity",
    "plugin_release_skill_id": "pluginrsk_6a88189f4ac48191b8d6b37d6131d693"
  },
  {
    "description": "CDN caching and request rate limiting for Control Plane workloads. Use when the user asks about CDN, Cloudflare, CloudFront, edge caching, rate limiting, request throttling, per-key or per-route limits, or DDoS protection.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "cdn-rate-limiting",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "CDN caching and request rate limiting for Control Plane workloads. Use when the user asks about CDN, Cloudflare, CloudFront, edge caching, rate limiting, request throttling, per-key or per-route limits, or DDoS protection."
    },
    "name": "cdn-rate-limiting",
    "plugin_release_skill_id": "pluginrsk_6a88189f6e44819185926acdd8e1fa96"
  },
  {
    "description": "Writes cpln CLI commands and workflows for Control Plane. Use when the user asks about cpln login, cpln apply, cpln workload, CLI or CI/CD deploys, container debugging with cpln exec/logs, or any cpln resource command.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "cpln",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Writes cpln CLI commands and workflows for Control Plane. Use when the user asks about cpln login, cpln apply, cpln workload, CLI or CI/CD deploys, container debugging with cpln exec/logs, or any cpln resource command."
    },
    "name": "cpln",
    "plugin_release_skill_id": "pluginrsk_6a88189f946481918af940d404eedccd"
  },
  {
    "description": "Custom domains for Control Plane workloads. Use when the user asks to put a domain or subdomain in front of a workload, pick cname vs ns, configure routing or TLS, or hits apex, ownership, or workloadLink errors.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "domain",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "cursor",
      "short_description": "Custom domains for Control Plane workloads. Use when the user asks to put a domain or subdomain in front of a workload, pick cname vs ns, configure routing or TLS, or hits apex, ownership, or workloadLink errors."
    },
    "name": "domain",
    "plugin_release_skill_id": "pluginrsk_6a88189fbbfc8191b12f56370356c0e3"
  },
  {
    "description": "Promotes workloads across dev/staging/production on Control Plane. Use when the user asks about environment promotion, org-per-environment, cross-org image pulls, image promotion, deploying to production, or rollback.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "environment-promotion",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Promotes workloads across dev/staging/production on Control Plane. Use when the user asks about environment promotion, org-per-environment, cross-org image pulls, image promotion, deploying to production, or rollback."
    },
    "name": "environment-promotion",
    "plugin_release_skill_id": "pluginrsk_6a88189fe09c81919f172dc3acd19ca9"
  },
  {
    "description": "Ships Control Plane org logs to external providers. Use when the user asks about log export to S3, CloudWatch, Coralogix, Datadog, Logz.io, Stackdriver, Elastic, syslog, OpenTelemetry, or centralized log forwarding.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "external-logging",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "pdf",
      "short_description": "Ships Control Plane org logs to external providers. Use when the user asks about log export to S3, CloudWatch, Coralogix, Datadog, Logz.io, Stackdriver, Elastic, syslog, OpenTelemetry, or centralized log forwarding."
    },
    "name": "external-logging",
    "plugin_release_skill_id": "pluginrsk_6a8818a00b2881919ab896f11b366072"
  },
  {
    "description": "Firewall rules and service-to-service communication on Control Plane. Use when the user asks about inbound/outbound rules, CIDR whitelisting, IP blocking, hostname filtering, geo-blocking, header routing, internal endpoints, or network security.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "firewall-networking",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Firewall rules and service-to-service communication on Control Plane. Use when the user asks about inbound/outbound rules, CIDR whitelisting, IP blocking, hostname filtering, geo-blocking, header routing, internal endpoints, or network security."
    },
    "name": "firewall-networking",
    "plugin_release_skill_id": "pluginrsk_6a8818a0329c8191b05aff650b0eb51f"
  },
  {
    "description": "Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "gitops-cicd",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI."
    },
    "name": "gitops-cicd",
    "plugin_release_skill_id": "pluginrsk_6a8818a05a3c819185e14d7a13554825"
  },
  {
    "description": "Manages Control Plane resources with Terraform or Pulumi. Use when the user asks about the Terraform or Pulumi provider, infrastructure as code, IaC, exporting resources to HCL, terraform import, state, or drift.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "iac-terraform-pulumi",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Manages Control Plane resources with Terraform or Pulumi. Use when the user asks about the Terraform or Pulumi provider, infrastructure as code, IaC, exporting resources to HCL, terraform import, state, or drift."
    },
    "name": "iac-terraform-pulumi",
    "plugin_release_skill_id": "pluginrsk_6a8818a082c88191b1ff64b3dc75c3c8"
  },
  {
    "description": "Builds, pushes, and manages container images on Control Plane. Use when the user asks about Docker build, remote build, image registry, tags, digests, Dockerfile, buildpacks, pull secrets, ECR/GCR, or image permissions.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "image",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Builds, pushes, and manages container images on Control Plane. Use when the user asks about Docker build, remote build, image registry, tags, digests, Dockerfile, buildpacks, pull secrets, ECR/GCR, or image permissions."
    },
    "name": "image",
    "plugin_release_skill_id": "pluginrsk_6a8818a0abec81919b39c74162cfff10"
  },
  {
    "description": "Static IPs and load balancers on Control Plane. Use when the user asks about IP sets, fixed IPs, direct or dedicated load balancers, exposing raw TCP/UDP ports, IP allowlisting, geo headers, or egress IPs.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "ipset-load-balancing",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Static IPs and load balancers on Control Plane. Use when the user asks about IP sets, fixed IPs, direct or dedicated load balancers, exposing raw TCP/UDP ports, IP allowlisting, geo headers, or egress IPs."
    },
    "name": "ipset-load-balancing",
    "plugin_release_skill_id": "pluginrsk_6a8818a0d2948191b605802001bfea3c"
  },
  {
    "description": "Manages Control Plane resources as Kubernetes CRDs. Use when the user asks about the Kubernetes operator, kubectl apply for Control Plane, CRDs, ArgoCD GitOps from a cluster, or exporting resources as K8s manifests.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "k8s-operator",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Manages Control Plane resources as Kubernetes CRDs. Use when the user asks about the Kubernetes operator, kubectl apply for Control Plane, CRDs, ArgoCD GitOps from a cluster, or exporting resources as K8s manifests."
    },
    "name": "k8s-operator",
    "plugin_release_skill_id": "pluginrsk_6a8818a0f6c081919a87fa232fed3630"
  },
  {
    "description": "Queries workload logs with LogQL on Control Plane. Use to troubleshoot a workload from its logs, or for log search, access or egress logs, cron run logs, missing or truncated logs, retention, or logs in Grafana.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "logql-observability",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "search",
      "short_description": "Queries workload logs with LogQL on Control Plane. Use to troubleshoot a workload from its logs, or for log search, access or egress logs, cron run logs, missing or truncated logs, retention, or logs in Grafana."
    },
    "name": "logql-observability",
    "plugin_release_skill_id": "pluginrsk_6a8818a120788191af5d1663512714ed"
  },
  {
    "description": "Workload metrics, PromQL, Grafana, and tracing on Control Plane. Use to observe or troubleshoot a workload via CPU/memory/request or custom metrics, traces, Prometheus federation, alerts, or metrics retention.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "metrics-observability",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Workload metrics, PromQL, Grafana, and tracing on Control Plane. Use to observe or troubleshoot a workload via CPU/memory/request or custom metrics, traces, Prometheus federation, alerts, or metrics retention."
    },
    "name": "metrics-observability",
    "plugin_release_skill_id": "pluginrsk_6a8818a145b8819180cc86bce3c304d9"
  },
  {
    "description": "Migrate workloads from Kubernetes, Docker Compose, or Helm to Control Plane. Use when the user asks to convert k8s manifests, a docker-compose.yml, or Helm charts, or to move an existing app onto the platform.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "migration-patterns",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Migrate workloads from Kubernetes, Docker Compose, or Helm to Control Plane. Use when the user asks to convert k8s manifests, a docker-compose.yml, or Helm charts, or to move an existing app onto the platform."
    },
    "name": "migration-patterns",
    "plugin_release_skill_id": "pluginrsk_6a8818a16a1481918e70c4cf7c92f7e2"
  },
  {
    "description": "Connects Control Plane workloads to private VPCs, on-prem networks, and cross-cloud resources. Use when the user asks about AWS PrivateLink, GCP Private Service Connect, wormhole agents, or reaching a private network.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "native-networking",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Connects Control Plane workloads to private VPCs, on-prem networks, and cross-cloud resources. Use when the user asks about AWS PrivateLink, GCP Private Service Connect, wormhole agents, or reaching a private network."
    },
    "name": "native-networking",
    "plugin_release_skill_id": "pluginrsk_6a8818a1ba3081919c45622674270687"
  },
  {
    "description": "Diagnoses unhealthy Control Plane workloads. Use when asked why a workload is crashing, not starting, OOMKilled, ImagePullBackOff, returning 502s, failing health checks, unreachable, or stuck deploying.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "workload-troubleshooting",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Diagnoses unhealthy Control Plane workloads. Use when asked why a workload is crashing, not starting, OOMKilled, ImagePullBackOff, returning 502s, failing health checks, unreachable, or stuck deploying."
    },
    "name": "workload-troubleshooting",
    "plugin_release_skill_id": "pluginrsk_6a8818a1de1881918a4ba7d99d4754d1"
  },
  {
    "description": "Production hardening for Control Plane workloads. Use when asked about JWT/Envoy auth, security context (runAsUser), health probe tuning, direct load balancers, geo-location headers, or graceful shutdown / termination.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "workload-security",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Production hardening for Control Plane workloads. Use when asked about JWT/Envoy auth, security context (runAsUser), health probe tuning, direct load balancers, geo-location headers, or graceful shutdown / termination."
    },
    "name": "workload-security",
    "plugin_release_skill_id": "pluginrsk_6a8818a20a5481918f4793a8ab9aa507"
  },
  {
    "description": "Primary skill for creating, updating, running, and debugging workloads on Control Plane; routes to a deeper skill per subject. Use when the user asks to deploy or run a container, app, API, service, worker, or job, or to change, scale, expose, secure, or diagnose one.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "workload",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Primary skill for creating, updating, running, and debugging workloads on Control Plane; routes to a deeper skill per subject. Use when the user asks to deploy or run a container, app, API, service, worker, or job, or to change, scale, expose, secure, or diagnose one."
    },
    "name": "workload",
    "plugin_release_skill_id": "pluginrsk_6a8818a230088191a45295a14168f6ea"
  },
  {
    "description": "Recommends and installs templates from the Control Plane Template Catalog. Use when the user wants postgres, redis, kafka, mongodb, mysql, or any database, cache, queue, or gateway, or asks what templates exist.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "template-catalog",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "cursor",
      "short_description": "Recommends and installs templates from the Control Plane Template Catalog. Use when the user wants postgres, redis, kafka, mongodb, mysql, or any database, cache, queue, or gateway, or asks what templates exist."
    },
    "name": "template-catalog",
    "plugin_release_skill_id": "pluginrsk_6a8818a258508191b3c7f5c63c9b67d7"
  },
  {
    "description": "Resource tags on Control Plane — labels that organize resources, trigger built-in cpln/ behaviors, and drive targeting. Use when the user asks about tags, labels, tagging, naming conventions, or resource protection.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "tag",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Resource tags on Control Plane — labels that organize resources, trigger built-in cpln/ behaviors, and drive targeting. Use when the user asks about tags, labels, tagging, naming conventions, or resource protection."
    },
    "name": "tag",
    "plugin_release_skill_id": "pluginrsk_6a8818a27d288191b859287b49950174"
  },
  {
    "description": "Creates persistent storage for stateful workloads on Control Plane. Use when the user asks about volumes, volume sets, disks, mounting storage, snapshots, volume expansion, filesystems, shared storage, or backups.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "stateful-storage",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Creates persistent storage for stateful workloads on Control Plane. Use when the user asks about volumes, volume sets, disks, mounting storage, snapshots, volume expansion, filesystems, shared storage, or backups."
    },
    "name": "stateful-storage",
    "plugin_release_skill_id": "pluginrsk_6a8818a2a5b08191a60ede913f013aea"
  },
  {
    "description": "Secret access wiring and manifest authoring. Use when a workload needs to read a secret, the user asks to create a secret or generate secret YAML, configure a pull secret, or fix a deployment paused on a secret reference.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "setup-secret",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Secret access wiring and manifest authoring. Use when a workload needs to read a secret, the user asks to create a secret or generate secret YAML, configure a pull secret, or fix a deployment paused on a secret reference."
    },
    "name": "setup-secret",
    "plugin_release_skill_id": "pluginrsk_6a8818a2cca881919ee12066b912e002"
  },
  {
    "description": "Credential-free cloud access (Universal Cloud Identity) for a Control Plane workload. Use when a workload needs AWS, GCP, Azure, or NATS NGS resources without embedded keys, or asks to register a cloud account.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "setup-cloud-access",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Credential-free cloud access (Universal Cloud Identity) for a Control Plane workload. Use when a workload needs AWS, GCP, Azure, or NATS NGS resources without embedded keys, or asks to register a cloud account."
    },
    "name": "setup-cloud-access",
    "plugin_release_skill_id": "pluginrsk_6a8818a2f1a88191b38ceb1abed2ee0e"
  },
  {
    "description": "Deploys a Control Plane wormhole agent connecting workloads to private-network resources. Use when the user asks to reach a VPC, on-prem, data-center, or cross-cloud host, set up a tunnel, or run an agent.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "setup-agent",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "cursor",
      "short_description": "Deploys a Control Plane wormhole agent connecting workloads to private-network resources. Use when the user asks to reach a VPC, on-prem, data-center, or cross-cloud host, set up a tunnel, or run an agent."
    },
    "name": "setup-agent",
    "plugin_release_skill_id": "pluginrsk_6a8818a315348191b0526d1b4f8f3b24"
  },
  {
    "description": "Filters, selects, and sorts Control Plane resources with the query spec language. Use when the user asks about targetQuery, memberQuery, cpln query commands, tag-based selection, property filtering, or dynamic location selection.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "query-spec",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "search",
      "short_description": "Filters, selects, and sorts Control Plane resources with the query spec language. Use when the user asks about targetQuery, memberQuery, cpln query commands, tag-based selection, property filtering, or dynamic location selection."
    },
    "name": "query-spec",
    "plugin_release_skill_id": "pluginrsk_6a8818a337388191b2a2df5307b9d17d"
  },
  {
    "description": "Runs workloads on your own hardware and provisions managed Kubernetes (mk8s) clusters on Control Plane. Use when the user asks about bare metal, on-prem, data centers, their own servers, mk8s, BYOK, or node pools.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "mk8s-byok",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Runs workloads on your own hardware and provisions managed Kubernetes (mk8s) clusters on Control Plane. Use when the user asks about bare metal, on-prem, data centers, their own servers, mk8s, BYOK, or node pools."
    },
    "name": "mk8s-byok",
    "plugin_release_skill_id": "pluginrsk_6a888dd4e91c81919d4c46cc3198837d"
  }
]
AFTER
[
  {
    "description": "Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or IAM.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "access-control",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or IAM."
    },
    "name": "access-control",
    "plugin_release_skill_id": "pluginrsk_6abe7bd5bc588191b15e480f5c35a7f5"
  },
  {
    "description": "Audit trail and compliance on Control Plane. Use when the user asks about audit logs, who changed what, change tracking, audit contexts, writing custom audit events, security monitoring, SOC 2, HIPAA, or PCI compliance.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "audit-compliance",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Audit trail and compliance on Control Plane. Use when the user asks about audit logs, who changed what, change tracking, audit contexts, writing custom audit events, security monitoring, SOC 2, HIPAA, or PCI compliance."
    },
    "name": "audit-compliance",
    "plugin_release_skill_id": "pluginrsk_6abe7bd6adc08191a34b491239f3438d"
  },
  {
    "description": "Workload autoscaling and Capacity AI on Control Plane. Use when the user asks about scaling up/down, min/max replicas, scale-to-zero, concurrency/RPS/CPU/memory/latency scaling, KEDA, event-driven scaling, or right-sizing.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "autoscaling-capacity",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "chart",
      "short_description": "Workload autoscaling and Capacity AI on Control Plane. Use when the user asks about scaling up/down, min/max replicas, scale-to-zero, concurrency/RPS/CPU/memory/latency scaling, KEDA, event-driven scaling, or right-sizing."
    },
    "name": "autoscaling-capacity",
    "plugin_release_skill_id": "pluginrsk_6abe7bd4d3388191901d0bd2434e7209"
  },
  {
    "description": "CDN caching and request rate limiting for Control Plane workloads. Use when the user asks about CDN, Cloudflare, CloudFront, edge caching, rate limiting, request throttling, per-key or per-route limits, or DDoS protection.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "cdn-rate-limiting",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "CDN caching and request rate limiting for Control Plane workloads. Use when the user asks about CDN, Cloudflare, CloudFront, edge caching, rate limiting, request throttling, per-key or per-route limits, or DDoS protection."
    },
    "name": "cdn-rate-limiting",
    "plugin_release_skill_id": "pluginrsk_6abe7bd390408191ad97ae5da3cb152a"
  },
  {
    "description": "Writes cpln CLI commands and workflows for Control Plane. Use when the user asks about cpln login, cpln apply, cpln workload, CLI or CI/CD deploys, container debugging with cpln exec/logs, or any cpln resource command.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "cpln",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Writes cpln CLI commands and workflows for Control Plane. Use when the user asks about cpln login, cpln apply, cpln workload, CLI or CI/CD deploys, container debugging with cpln exec/logs, or any cpln resource command."
    },
    "name": "cpln",
    "plugin_release_skill_id": "pluginrsk_6abe7bdd18a88191a81518f8e73fc6b2"
  },
  {
    "description": "Writes, builds, and deploys an app the user asks for in the chat, with no repository and no image yet. Use when the user asks to create, generate, write, vibe-code, prototype, or scaffold an app, API, site, bot, game, or service and run it on Control Plane, or to change an app made this way.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "create-app",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Writes, builds, and deploys an app the user asks for in the chat, with no repository and no image yet. Use when the user asks to create, generate, write, vibe-code, prototype, or scaffold an app, API, site, bot, game, or service and run it on Control Plane, or to change an app made this way."
    },
    "name": "create-app",
    "plugin_release_skill_id": "pluginrsk_6abe7bdb55388191bb5fe7ae4c1bb3e5"
  },
  {
    "description": "Custom domains for Control Plane workloads. Use when the user asks to put a domain or subdomain in front of a workload, pick cname vs ns, configure routing or TLS, or hits apex, ownership, or workloadLink errors.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "domain",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Custom domains for Control Plane workloads. Use when the user asks to put a domain or subdomain in front of a workload, pick cname vs ns, configure routing or TLS, or hits apex, ownership, or workloadLink errors."
    },
    "name": "domain",
    "plugin_release_skill_id": "pluginrsk_6abe7bd3df5881918b76147565063de7"
  },
  {
    "description": "Promotes workloads across dev/staging/production on Control Plane. Use when the user asks about environment promotion, org-per-environment, cross-org image pulls, image promotion, deploying to production, or rollback.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "environment-promotion",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Promotes workloads across dev/staging/production on Control Plane. Use when the user asks about environment promotion, org-per-environment, cross-org image pulls, image promotion, deploying to production, or rollback."
    },
    "name": "environment-promotion",
    "plugin_release_skill_id": "pluginrsk_6abe7bd7995881918844aca37a6d6d2e"
  },
  {
    "description": "Ships Control Plane org logs to external providers. Use when the user asks about log export to S3, CloudWatch, Coralogix, Datadog, Logz.io, Stackdriver, Elastic, syslog, OpenTelemetry, or centralized log forwarding.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "external-logging",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Ships Control Plane org logs to external providers. Use when the user asks about log export to S3, CloudWatch, Coralogix, Datadog, Logz.io, Stackdriver, Elastic, syslog, OpenTelemetry, or centralized log forwarding."
    },
    "name": "external-logging",
    "plugin_release_skill_id": "pluginrsk_6abe7bd532e081918ec1ff9b19d907ad"
  },
  {
    "description": "Firewall rules and service-to-service communication on Control Plane. Use when the user asks about inbound/outbound rules, CIDR whitelisting, IP blocking, hostname filtering, geo-blocking, header routing, internal endpoints, or network security.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "firewall-networking",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Firewall rules and service-to-service communication on Control Plane. Use when the user asks about inbound/outbound rules, CIDR whitelisting, IP blocking, hostname filtering, geo-blocking, header routing, internal endpoints, or network security."
    },
    "name": "firewall-networking",
    "plugin_release_skill_id": "pluginrsk_6abe7bd65b94819192bb8044c21e2d3c"
  },
  {
    "description": "Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "gitops-cicd",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI."
    },
    "name": "gitops-cicd",
    "plugin_release_skill_id": "pluginrsk_6abe7bd8ef9c8191836d7706024c3a70"
  },
  {
    "description": "Manages Control Plane resources with Terraform or Pulumi. Use when the user asks about the Terraform or Pulumi provider, infrastructure as code, IaC, exporting resources to HCL, terraform import, state, or drift.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "iac-terraform-pulumi",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Manages Control Plane resources with Terraform or Pulumi. Use when the user asks about the Terraform or Pulumi provider, infrastructure as code, IaC, exporting resources to HCL, terraform import, state, or drift."
    },
    "name": "iac-terraform-pulumi",
    "plugin_release_skill_id": "pluginrsk_6abe7bd4f8308191a8fdaa5b37a0f3b9"
  },
  {
    "description": "Builds, pushes, and manages container images on Control Plane. Use when the user asks about Docker build, remote build, image registry, tags, digests, Dockerfile, buildpacks, pull secrets, ECR/GCR, or image permissions.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "image",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "code",
      "short_description": "Builds, pushes, and manages container images on Control Plane. Use when the user asks about Docker build, remote build, image registry, tags, digests, Dockerfile, buildpacks, pull secrets, ECR/GCR, or image permissions."
    },
    "name": "image",
    "plugin_release_skill_id": "pluginrsk_6abe7bdbf0e48191aaa65857d36cfeb5"
  },
  {
    "description": "Static IPs and load balancers on Control Plane. Use when the user asks about IP sets, fixed IPs, direct or dedicated load balancers, exposing raw TCP/UDP ports, IP allowlisting, geo headers, or egress IPs.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "ipset-load-balancing",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Static IPs and load balancers on Control Plane. Use when the user asks about IP sets, fixed IPs, direct or dedicated load balancers, exposing raw TCP/UDP ports, IP allowlisting, geo headers, or egress IPs."
    },
    "name": "ipset-load-balancing",
    "plugin_release_skill_id": "pluginrsk_6abe7bd7b34881919d16aa61d4fbef04"
  },
  {
    "description": "Manages Control Plane resources as Kubernetes CRDs. Use when the user asks about the Kubernetes operator, kubectl apply for Control Plane, CRDs, ArgoCD GitOps from a cluster, or exporting resources as K8s manifests.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "k8s-operator",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Manages Control Plane resources as Kubernetes CRDs. Use when the user asks about the Kubernetes operator, kubectl apply for Control Plane, CRDs, ArgoCD GitOps from a cluster, or exporting resources as K8s manifests."
    },
    "name": "k8s-operator",
    "plugin_release_skill_id": "pluginrsk_6abe7bdb5fac8191acb7ce1f1e7d01d7"
  },
  {
    "description": "Queries workload logs with LogQL on Control Plane. Use to troubleshoot a workload from its logs, or for log search, access or egress logs, cron run logs, missing or truncated logs, retention, or logs in Grafana.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "logql-observability",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "search",
      "short_description": "Queries workload logs with LogQL on Control Plane. Use to troubleshoot a workload from its logs, or for log search, access or egress logs, cron run logs, missing or truncated logs, retention, or logs in Grafana."
    },
    "name": "logql-observability",
    "plugin_release_skill_id": "pluginrsk_6abe7bd3e8988191820f22f7f8ba57f4"
  },
  {
    "description": "Workload metrics, PromQL, Grafana, and tracing on Control Plane. Use to observe or troubleshoot a workload via CPU/memory/request or custom metrics, traces, Prometheus federation, alerts, or metrics retention.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "metrics-observability",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "chart",
      "short_description": "Workload metrics, PromQL, Grafana, and tracing on Control Plane. Use to observe or troubleshoot a workload via CPU/memory/request or custom metrics, traces, Prometheus federation, alerts, or metrics retention."
    },
    "name": "metrics-observability",
    "plugin_release_skill_id": "pluginrsk_6abe7bdaa6448191a236fe606be94e58"
  },
  {
    "description": "Migrate workloads from Kubernetes, Docker Compose, or Helm to Control Plane. Use when the user asks to convert k8s manifests, a docker-compose.yml, or Helm charts, or to move an existing app onto the platform.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "migration-patterns",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Migrate workloads from Kubernetes, Docker Compose, or Helm to Control Plane. Use when the user asks to convert k8s manifests, a docker-compose.yml, or Helm charts, or to move an existing app onto the platform."
    },
    "name": "migration-patterns",
    "plugin_release_skill_id": "pluginrsk_6abe7bd6af6481919acdca317bbacb04"
  },
  {
    "description": "Runs workloads on your own hardware and provisions managed Kubernetes (mk8s) clusters on Control Plane. Use when the user asks about bare metal, on-prem, data centers, their own servers, mk8s, BYOK, or node pools.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "mk8s-byok",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Runs workloads on your own hardware and provisions managed Kubernetes (mk8s) clusters on Control Plane. Use when the user asks about bare metal, on-prem, data centers, their own servers, mk8s, BYOK, or node pools."
    },
    "name": "mk8s-byok",
    "plugin_release_skill_id": "pluginrsk_6abe7bdc5424819186d9d924053ca5f1"
  },
  {
    "description": "Connects Control Plane workloads to private VPCs, on-prem networks, and cross-cloud resources. Use when the user asks about AWS PrivateLink, GCP Private Service Connect, wormhole agents, or reaching a private network.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "native-networking",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Connects Control Plane workloads to private VPCs, on-prem networks, and cross-cloud resources. Use when the user asks about AWS PrivateLink, GCP Private Service Connect, wormhole agents, or reaching a private network."
    },
    "name": "native-networking",
    "plugin_release_skill_id": "pluginrsk_6abe7bd7bc1881919f75798061d46786"
  },
  {
    "description": "Manages organizations, billing, users, and authentication on Control Plane. Use when the user asks about creating an org, billing, inviting users, SSO or SAML login, CLI profiles, switching orgs, or service accounts.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "org-management",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Manages organizations, billing, users, and authentication on Control Plane. Use when the user asks about creating an org, billing, inviting users, SSO or SAML login, CLI profiles, switching orgs, or service accounts."
    },
    "name": "org-management",
    "plugin_release_skill_id": "pluginrsk_6abe7bdbff8c8191a95e949b2f12c467"
  },
  {
    "description": "Filters, selects, and sorts Control Plane resources with the query spec language. Use when the user asks about targetQuery, memberQuery, cpln query commands, tag-based selection, property filtering, or dynamic location selection.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "query-spec",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "search",
      "short_description": "Filters, selects, and sorts Control Plane resources with the query spec language. Use when the user asks about targetQuery, memberQuery, cpln query commands, tag-based selection, property filtering, or dynamic location selection."
    },
    "name": "query-spec",
    "plugin_release_skill_id": "pluginrsk_6abe7bd90df08191949a4047a9f7d9d6"
  },
  {
    "description": "Deploys a Control Plane wormhole agent connecting workloads to private-network resources. Use when the user asks to reach a VPC, on-prem, data-center, or cross-cloud host, set up a tunnel, or run an agent.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "setup-agent",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Deploys a Control Plane wormhole agent connecting workloads to private-network resources. Use when the user asks to reach a VPC, on-prem, data-center, or cross-cloud host, set up a tunnel, or run an agent."
    },
    "name": "setup-agent",
    "plugin_release_skill_id": "pluginrsk_6abe7bd3e4208191be72e6ef4b066237"
  },
  {
    "description": "Credential-free cloud access (Universal Cloud Identity) for a Control Plane workload. Use when a workload needs AWS, GCP, Azure, or NATS NGS resources without embedded keys, or asks to register a cloud account.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "setup-cloud-access",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Credential-free cloud access (Universal Cloud Identity) for a Control Plane workload. Use when a workload needs AWS, GCP, Azure, or NATS NGS resources without embedded keys, or asks to register a cloud account."
    },
    "name": "setup-cloud-access",
    "plugin_release_skill_id": "pluginrsk_6abe7bd96b8c81919959616a1aee5faa"
  },
  {
    "description": "Secret access wiring and manifest authoring. Use when a workload needs to read a secret, the user asks to create a secret or generate secret YAML, configure a pull secret, or fix a deployment paused on a secret reference.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "setup-secret",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Secret access wiring and manifest authoring. Use when a workload needs to read a secret, the user asks to create a secret or generate secret YAML, configure a pull secret, or fix a deployment paused on a secret reference."
    },
    "name": "setup-secret",
    "plugin_release_skill_id": "pluginrsk_6abe7bda365c8191a702ad2fdc81b2c4"
  },
  {
    "description": "Creates persistent storage for stateful workloads on Control Plane. Use when the user asks about volumes, volume sets, disks, mounting storage, snapshots, volume expansion, filesystems, shared storage, or backups.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "stateful-storage",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Creates persistent storage for stateful workloads on Control Plane. Use when the user asks about volumes, volume sets, disks, mounting storage, snapshots, volume expansion, filesystems, shared storage, or backups."
    },
    "name": "stateful-storage",
    "plugin_release_skill_id": "pluginrsk_6abe7bda9b808191939683d7284ba42b"
  },
  {
    "description": "Resource tags on Control Plane — labels that organize resources, trigger built-in cpln/ behaviors, and drive targeting. Use when the user asks about tags, labels, tagging, naming conventions, or resource protection.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "tag",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Resource tags on Control Plane — labels that organize resources, trigger built-in cpln/ behaviors, and drive targeting. Use when the user asks about tags, labels, tagging, naming conventions, or resource protection."
    },
    "name": "tag",
    "plugin_release_skill_id": "pluginrsk_6abe7bda49d481918c1d902a4585a574"
  },
  {
    "description": "Recommends and installs templates from the Control Plane Template Catalog. Use when the user wants postgres, redis, kafka, mongodb, mysql, or any database, cache, queue, or gateway, or asks what templates exist.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "template-catalog",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "hierarchy",
      "short_description": "Recommends and installs templates from the Control Plane Template Catalog. Use when the user wants postgres, redis, kafka, mongodb, mysql, or any database, cache, queue, or gateway, or asks what templates exist."
    },
    "name": "template-catalog",
    "plugin_release_skill_id": "pluginrsk_6abe7bd88aa0819184fd69bde6bc1ee5"
  },
  {
    "description": "Primary skill for creating, updating, running, and debugging workloads on Control Plane; routes to a deeper skill per subject. Use when the user asks to deploy or run a container, app, API, service, worker, or job, or to change, scale, expose, secure, or diagnose one.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "workload",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Primary skill for creating, updating, running, and debugging workloads on Control Plane; routes to a deeper skill per subject. Use when the user asks to deploy or run a container, app, API, service, worker, or job, or to change, scale, expose, secure, or diagnose one."
    },
    "name": "workload",
    "plugin_release_skill_id": "pluginrsk_6abe7bd8f964819183d2107d1d9b431c"
  },
  {
    "description": "Production hardening for Control Plane workloads. Use when asked about JWT/Envoy auth, security context (runAsUser), health probe tuning, direct load balancers, geo-location headers, or graceful shutdown / termination.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "workload-security",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "bolt",
      "short_description": "Production hardening for Control Plane workloads. Use when asked about JWT/Envoy auth, security context (runAsUser), health probe tuning, direct load balancers, geo-location headers, or graceful shutdown / termination."
    },
    "name": "workload-security",
    "plugin_release_skill_id": "pluginrsk_6abe7bd78d108191a27d14d997ad2163"
  },
  {
    "description": "Diagnoses unhealthy Control Plane workloads. Use when asked why a workload is crashing, not starting, OOMKilled, ImagePullBackOff, returning 502s, failing health checks, unreachable, or stuck deploying.",
    "interface": {
      "brand_color": null,
      "default_prompt": null,
      "display_name": "workload-troubleshooting",
      "icon_large_url": null,
      "icon_small_url": null,
      "iconography": "radar",
      "short_description": "Diagnoses unhealthy Control Plane workloads. Use when asked why a workload is crashing, not starting, OOMKilled, ImagePullBackOff, returning 502s, failing health checks, unreachable, or stuck deploying."
    },
    "name": "workload-troubleshooting",
    "plugin_release_skill_id": "pluginrsk_6abe7bdcab608191b1e4ecae2c02f826"
  }
]

changed /release/version

BEFORE
"1.0.1"
AFTER
"1.1.0"
Full snapshot data
{
  "canonical_app_id": "asdk_app_6a3345aed5b081918ae752ac49e4df0e",
  "connector_id": "asdk_app_6a3345aed5b081918ae752ac49e4df0e",
  "created_at": "2026-06-23T03:47:25.345998Z",
  "discoverability": "LISTED",
  "id": "plugin_asdk_app_6a3345aed5b081918ae752ac49e4df0e",
  "is_template": false,
  "is_template_instance": false,
  "name": "app-6a3345aed5b081918ae752ac49e4df0e",
  "release": {
    "app_ids": [
      "asdk_app_6a3345aed5b081918ae752ac49e4df0e"
    ],
    "app_manifest": {
      "apps": {
        "cpln": {
          "id": "asdk_app_6a3345aed5b081918ae752ac49e4df0e",
          "required": true
        }
      }
    },
    "app_templates": [],
    "description": "Control Plane skills, operating rules, and MCP server for building, deploying, and running containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware.",
    "display_name": "Control Plane",
    "id": "pluginrel_be0658defe788191b8841205f871c0a7",
    "interface": {
      "brand_color": "#1563FF",
      "capabilities": [
        "Read",
        "Write"
      ],
      "category": "Developer Tools",
      "composer_icon_dark_url": null,
      "composer_icon_url": "https://files.openai.com/content?id=file_0000000081d88243ab9e2b35f74f1ab4",
      "default_prompt": "Build and deploy a simple web app for me on Control Plane.",
      "default_prompts": [
        "Build and deploy a simple web app for me on Control Plane.",
        "Why is my workload not starting? Check its logs and events.",
        "Add a Postgres database my app can connect to."
      ],
      "developer_name": "Control Plane Corporation",
      "logo_url": "https://files.openai.com/content?id=file_00000000bbec81f4b34a481bbee0a41c",
      "logo_url_dark": null,
      "long_description": "Control Plane runs containerized apps across AWS, GCP, Azure, Oracle Cloud, and your own hardware as one platform. Describe an app and the assistant writes, builds, and deploys it to a live HTTPS URL, or builds one from your GitHub or GitLab repository. For an app that keeps records, files, or sign-ins, it plans the database, storage, and sign-in with you before writing any code. Give an app a custom domain, add PostgreSQL, MySQL, MariaDB, MongoDB, or Redis, and let it autoscale. Diagnose failures from logs, events, metrics, and traces, then restart, roll back, or promote a workload, and compare used against reserved CPU and memory to find the over-provisioned workloads inflating your cloud bill. Workloads reach AWS, GCP, and Azure through your registered cloud accounts without stored keys, and you can install services from the Template Catalog and export your setup to Terraform. The plugin acts only on the organizations you grant when you connect, and secret values are generated by Control Plane or entered by you in the Control Plane Console, never in the chat.",
      "plugin_category_id": "developer tools",
      "privacy_policy_url": "https://controlplane.com/privacy-policy",
      "screenshot_urls": [],
      "short_description": "Build and deploy apps",
      "terms_of_service_url": "https://controlplane.com/terms-of-use",
      "website_url": "https://docs.controlplane.com/ai/plugin"
    },
    "keywords": [
      "controlplane",
      "cpln",
      "multi-cloud",
      "kubernetes",
      "workloads",
      "deploy",
      "containers",
      "networking",
      "secret-access",
      "autoscaling"
    ],
    "onboarding_skill_name": null,
    "requires_local_executor": false,
    "skills": [
      {
        "description": "Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or IAM.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "access-control",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Primary skill for access control, policies, and RBAC on Control Plane. Use when the user asks about permissions, policies, service accounts, user access, group membership, bindings, who can do what, least-privilege, or IAM."
        },
        "name": "access-control",
        "plugin_release_skill_id": "pluginrsk_6abe7bd5bc588191b15e480f5c35a7f5"
      },
      {
        "description": "Audit trail and compliance on Control Plane. Use when the user asks about audit logs, who changed what, change tracking, audit contexts, writing custom audit events, security monitoring, SOC 2, HIPAA, or PCI compliance.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "audit-compliance",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Audit trail and compliance on Control Plane. Use when the user asks about audit logs, who changed what, change tracking, audit contexts, writing custom audit events, security monitoring, SOC 2, HIPAA, or PCI compliance."
        },
        "name": "audit-compliance",
        "plugin_release_skill_id": "pluginrsk_6abe7bd6adc08191a34b491239f3438d"
      },
      {
        "description": "Workload autoscaling and Capacity AI on Control Plane. Use when the user asks about scaling up/down, min/max replicas, scale-to-zero, concurrency/RPS/CPU/memory/latency scaling, KEDA, event-driven scaling, or right-sizing.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "autoscaling-capacity",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "chart",
          "short_description": "Workload autoscaling and Capacity AI on Control Plane. Use when the user asks about scaling up/down, min/max replicas, scale-to-zero, concurrency/RPS/CPU/memory/latency scaling, KEDA, event-driven scaling, or right-sizing."
        },
        "name": "autoscaling-capacity",
        "plugin_release_skill_id": "pluginrsk_6abe7bd4d3388191901d0bd2434e7209"
      },
      {
        "description": "CDN caching and request rate limiting for Control Plane workloads. Use when the user asks about CDN, Cloudflare, CloudFront, edge caching, rate limiting, request throttling, per-key or per-route limits, or DDoS protection.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "cdn-rate-limiting",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "CDN caching and request rate limiting for Control Plane workloads. Use when the user asks about CDN, Cloudflare, CloudFront, edge caching, rate limiting, request throttling, per-key or per-route limits, or DDoS protection."
        },
        "name": "cdn-rate-limiting",
        "plugin_release_skill_id": "pluginrsk_6abe7bd390408191ad97ae5da3cb152a"
      },
      {
        "description": "Writes cpln CLI commands and workflows for Control Plane. Use when the user asks about cpln login, cpln apply, cpln workload, CLI or CI/CD deploys, container debugging with cpln exec/logs, or any cpln resource command.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "cpln",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "code",
          "short_description": "Writes cpln CLI commands and workflows for Control Plane. Use when the user asks about cpln login, cpln apply, cpln workload, CLI or CI/CD deploys, container debugging with cpln exec/logs, or any cpln resource command."
        },
        "name": "cpln",
        "plugin_release_skill_id": "pluginrsk_6abe7bdd18a88191a81518f8e73fc6b2"
      },
      {
        "description": "Writes, builds, and deploys an app the user asks for in the chat, with no repository and no image yet. Use when the user asks to create, generate, write, vibe-code, prototype, or scaffold an app, API, site, bot, game, or service and run it on Control Plane, or to change an app made this way.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "create-app",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "code",
          "short_description": "Writes, builds, and deploys an app the user asks for in the chat, with no repository and no image yet. Use when the user asks to create, generate, write, vibe-code, prototype, or scaffold an app, API, site, bot, game, or service and run it on Control Plane, or to change an app made this way."
        },
        "name": "create-app",
        "plugin_release_skill_id": "pluginrsk_6abe7bdb55388191bb5fe7ae4c1bb3e5"
      },
      {
        "description": "Custom domains for Control Plane workloads. Use when the user asks to put a domain or subdomain in front of a workload, pick cname vs ns, configure routing or TLS, or hits apex, ownership, or workloadLink errors.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "domain",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Custom domains for Control Plane workloads. Use when the user asks to put a domain or subdomain in front of a workload, pick cname vs ns, configure routing or TLS, or hits apex, ownership, or workloadLink errors."
        },
        "name": "domain",
        "plugin_release_skill_id": "pluginrsk_6abe7bd3df5881918b76147565063de7"
      },
      {
        "description": "Promotes workloads across dev/staging/production on Control Plane. Use when the user asks about environment promotion, org-per-environment, cross-org image pulls, image promotion, deploying to production, or rollback.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "environment-promotion",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Promotes workloads across dev/staging/production on Control Plane. Use when the user asks about environment promotion, org-per-environment, cross-org image pulls, image promotion, deploying to production, or rollback."
        },
        "name": "environment-promotion",
        "plugin_release_skill_id": "pluginrsk_6abe7bd7995881918844aca37a6d6d2e"
      },
      {
        "description": "Ships Control Plane org logs to external providers. Use when the user asks about log export to S3, CloudWatch, Coralogix, Datadog, Logz.io, Stackdriver, Elastic, syslog, OpenTelemetry, or centralized log forwarding.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "external-logging",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Ships Control Plane org logs to external providers. Use when the user asks about log export to S3, CloudWatch, Coralogix, Datadog, Logz.io, Stackdriver, Elastic, syslog, OpenTelemetry, or centralized log forwarding."
        },
        "name": "external-logging",
        "plugin_release_skill_id": "pluginrsk_6abe7bd532e081918ec1ff9b19d907ad"
      },
      {
        "description": "Firewall rules and service-to-service communication on Control Plane. Use when the user asks about inbound/outbound rules, CIDR whitelisting, IP blocking, hostname filtering, geo-blocking, header routing, internal endpoints, or network security.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "firewall-networking",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Firewall rules and service-to-service communication on Control Plane. Use when the user asks about inbound/outbound rules, CIDR whitelisting, IP blocking, hostname filtering, geo-blocking, header routing, internal endpoints, or network security."
        },
        "name": "firewall-networking",
        "plugin_release_skill_id": "pluginrsk_6abe7bd65b94819192bb8044c21e2d3c"
      },
      {
        "description": "Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "gitops-cicd",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Sets up CI/CD pipelines and GitOps for Control Plane. Use when the user asks about GitHub Actions, GitLab CI, Bitbucket, CircleCI, building images in CI, kaniko, cpln apply in pipelines, or service-account tokens for CI."
        },
        "name": "gitops-cicd",
        "plugin_release_skill_id": "pluginrsk_6abe7bd8ef9c8191836d7706024c3a70"
      },
      {
        "description": "Manages Control Plane resources with Terraform or Pulumi. Use when the user asks about the Terraform or Pulumi provider, infrastructure as code, IaC, exporting resources to HCL, terraform import, state, or drift.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "iac-terraform-pulumi",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "code",
          "short_description": "Manages Control Plane resources with Terraform or Pulumi. Use when the user asks about the Terraform or Pulumi provider, infrastructure as code, IaC, exporting resources to HCL, terraform import, state, or drift."
        },
        "name": "iac-terraform-pulumi",
        "plugin_release_skill_id": "pluginrsk_6abe7bd4f8308191a8fdaa5b37a0f3b9"
      },
      {
        "description": "Builds, pushes, and manages container images on Control Plane. Use when the user asks about Docker build, remote build, image registry, tags, digests, Dockerfile, buildpacks, pull secrets, ECR/GCR, or image permissions.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "image",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "code",
          "short_description": "Builds, pushes, and manages container images on Control Plane. Use when the user asks about Docker build, remote build, image registry, tags, digests, Dockerfile, buildpacks, pull secrets, ECR/GCR, or image permissions."
        },
        "name": "image",
        "plugin_release_skill_id": "pluginrsk_6abe7bdbf0e48191aaa65857d36cfeb5"
      },
      {
        "description": "Static IPs and load balancers on Control Plane. Use when the user asks about IP sets, fixed IPs, direct or dedicated load balancers, exposing raw TCP/UDP ports, IP allowlisting, geo headers, or egress IPs.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "ipset-load-balancing",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Static IPs and load balancers on Control Plane. Use when the user asks about IP sets, fixed IPs, direct or dedicated load balancers, exposing raw TCP/UDP ports, IP allowlisting, geo headers, or egress IPs."
        },
        "name": "ipset-load-balancing",
        "plugin_release_skill_id": "pluginrsk_6abe7bd7b34881919d16aa61d4fbef04"
      },
      {
        "description": "Manages Control Plane resources as Kubernetes CRDs. Use when the user asks about the Kubernetes operator, kubectl apply for Control Plane, CRDs, ArgoCD GitOps from a cluster, or exporting resources as K8s manifests.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "k8s-operator",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Manages Control Plane resources as Kubernetes CRDs. Use when the user asks about the Kubernetes operator, kubectl apply for Control Plane, CRDs, ArgoCD GitOps from a cluster, or exporting resources as K8s manifests."
        },
        "name": "k8s-operator",
        "plugin_release_skill_id": "pluginrsk_6abe7bdb5fac8191acb7ce1f1e7d01d7"
      },
      {
        "description": "Queries workload logs with LogQL on Control Plane. Use to troubleshoot a workload from its logs, or for log search, access or egress logs, cron run logs, missing or truncated logs, retention, or logs in Grafana.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "logql-observability",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "search",
          "short_description": "Queries workload logs with LogQL on Control Plane. Use to troubleshoot a workload from its logs, or for log search, access or egress logs, cron run logs, missing or truncated logs, retention, or logs in Grafana."
        },
        "name": "logql-observability",
        "plugin_release_skill_id": "pluginrsk_6abe7bd3e8988191820f22f7f8ba57f4"
      },
      {
        "description": "Workload metrics, PromQL, Grafana, and tracing on Control Plane. Use to observe or troubleshoot a workload via CPU/memory/request or custom metrics, traces, Prometheus federation, alerts, or metrics retention.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "metrics-observability",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "chart",
          "short_description": "Workload metrics, PromQL, Grafana, and tracing on Control Plane. Use to observe or troubleshoot a workload via CPU/memory/request or custom metrics, traces, Prometheus federation, alerts, or metrics retention."
        },
        "name": "metrics-observability",
        "plugin_release_skill_id": "pluginrsk_6abe7bdaa6448191a236fe606be94e58"
      },
      {
        "description": "Migrate workloads from Kubernetes, Docker Compose, or Helm to Control Plane. Use when the user asks to convert k8s manifests, a docker-compose.yml, or Helm charts, or to move an existing app onto the platform.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "migration-patterns",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Migrate workloads from Kubernetes, Docker Compose, or Helm to Control Plane. Use when the user asks to convert k8s manifests, a docker-compose.yml, or Helm charts, or to move an existing app onto the platform."
        },
        "name": "migration-patterns",
        "plugin_release_skill_id": "pluginrsk_6abe7bd6af6481919acdca317bbacb04"
      },
      {
        "description": "Runs workloads on your own hardware and provisions managed Kubernetes (mk8s) clusters on Control Plane. Use when the user asks about bare metal, on-prem, data centers, their own servers, mk8s, BYOK, or node pools.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "mk8s-byok",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Runs workloads on your own hardware and provisions managed Kubernetes (mk8s) clusters on Control Plane. Use when the user asks about bare metal, on-prem, data centers, their own servers, mk8s, BYOK, or node pools."
        },
        "name": "mk8s-byok",
        "plugin_release_skill_id": "pluginrsk_6abe7bdc5424819186d9d924053ca5f1"
      },
      {
        "description": "Connects Control Plane workloads to private VPCs, on-prem networks, and cross-cloud resources. Use when the user asks about AWS PrivateLink, GCP Private Service Connect, wormhole agents, or reaching a private network.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "native-networking",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Connects Control Plane workloads to private VPCs, on-prem networks, and cross-cloud resources. Use when the user asks about AWS PrivateLink, GCP Private Service Connect, wormhole agents, or reaching a private network."
        },
        "name": "native-networking",
        "plugin_release_skill_id": "pluginrsk_6abe7bd7bc1881919f75798061d46786"
      },
      {
        "description": "Manages organizations, billing, users, and authentication on Control Plane. Use when the user asks about creating an org, billing, inviting users, SSO or SAML login, CLI profiles, switching orgs, or service accounts.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "org-management",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Manages organizations, billing, users, and authentication on Control Plane. Use when the user asks about creating an org, billing, inviting users, SSO or SAML login, CLI profiles, switching orgs, or service accounts."
        },
        "name": "org-management",
        "plugin_release_skill_id": "pluginrsk_6abe7bdbff8c8191a95e949b2f12c467"
      },
      {
        "description": "Filters, selects, and sorts Control Plane resources with the query spec language. Use when the user asks about targetQuery, memberQuery, cpln query commands, tag-based selection, property filtering, or dynamic location selection.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "query-spec",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "search",
          "short_description": "Filters, selects, and sorts Control Plane resources with the query spec language. Use when the user asks about targetQuery, memberQuery, cpln query commands, tag-based selection, property filtering, or dynamic location selection."
        },
        "name": "query-spec",
        "plugin_release_skill_id": "pluginrsk_6abe7bd90df08191949a4047a9f7d9d6"
      },
      {
        "description": "Deploys a Control Plane wormhole agent connecting workloads to private-network resources. Use when the user asks to reach a VPC, on-prem, data-center, or cross-cloud host, set up a tunnel, or run an agent.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "setup-agent",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Deploys a Control Plane wormhole agent connecting workloads to private-network resources. Use when the user asks to reach a VPC, on-prem, data-center, or cross-cloud host, set up a tunnel, or run an agent."
        },
        "name": "setup-agent",
        "plugin_release_skill_id": "pluginrsk_6abe7bd3e4208191be72e6ef4b066237"
      },
      {
        "description": "Credential-free cloud access (Universal Cloud Identity) for a Control Plane workload. Use when a workload needs AWS, GCP, Azure, or NATS NGS resources without embedded keys, or asks to register a cloud account.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "setup-cloud-access",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Credential-free cloud access (Universal Cloud Identity) for a Control Plane workload. Use when a workload needs AWS, GCP, Azure, or NATS NGS resources without embedded keys, or asks to register a cloud account."
        },
        "name": "setup-cloud-access",
        "plugin_release_skill_id": "pluginrsk_6abe7bd96b8c81919959616a1aee5faa"
      },
      {
        "description": "Secret access wiring and manifest authoring. Use when a workload needs to read a secret, the user asks to create a secret or generate secret YAML, configure a pull secret, or fix a deployment paused on a secret reference.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "setup-secret",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Secret access wiring and manifest authoring. Use when a workload needs to read a secret, the user asks to create a secret or generate secret YAML, configure a pull secret, or fix a deployment paused on a secret reference."
        },
        "name": "setup-secret",
        "plugin_release_skill_id": "pluginrsk_6abe7bda365c8191a702ad2fdc81b2c4"
      },
      {
        "description": "Creates persistent storage for stateful workloads on Control Plane. Use when the user asks about volumes, volume sets, disks, mounting storage, snapshots, volume expansion, filesystems, shared storage, or backups.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "stateful-storage",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Creates persistent storage for stateful workloads on Control Plane. Use when the user asks about volumes, volume sets, disks, mounting storage, snapshots, volume expansion, filesystems, shared storage, or backups."
        },
        "name": "stateful-storage",
        "plugin_release_skill_id": "pluginrsk_6abe7bda9b808191939683d7284ba42b"
      },
      {
        "description": "Resource tags on Control Plane — labels that organize resources, trigger built-in cpln/ behaviors, and drive targeting. Use when the user asks about tags, labels, tagging, naming conventions, or resource protection.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "tag",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Resource tags on Control Plane — labels that organize resources, trigger built-in cpln/ behaviors, and drive targeting. Use when the user asks about tags, labels, tagging, naming conventions, or resource protection."
        },
        "name": "tag",
        "plugin_release_skill_id": "pluginrsk_6abe7bda49d481918c1d902a4585a574"
      },
      {
        "description": "Recommends and installs templates from the Control Plane Template Catalog. Use when the user wants postgres, redis, kafka, mongodb, mysql, or any database, cache, queue, or gateway, or asks what templates exist.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "template-catalog",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "hierarchy",
          "short_description": "Recommends and installs templates from the Control Plane Template Catalog. Use when the user wants postgres, redis, kafka, mongodb, mysql, or any database, cache, queue, or gateway, or asks what templates exist."
        },
        "name": "template-catalog",
        "plugin_release_skill_id": "pluginrsk_6abe7bd88aa0819184fd69bde6bc1ee5"
      },
      {
        "description": "Primary skill for creating, updating, running, and debugging workloads on Control Plane; routes to a deeper skill per subject. Use when the user asks to deploy or run a container, app, API, service, worker, or job, or to change, scale, expose, secure, or diagnose one.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "workload",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Primary skill for creating, updating, running, and debugging workloads on Control Plane; routes to a deeper skill per subject. Use when the user asks to deploy or run a container, app, API, service, worker, or job, or to change, scale, expose, secure, or diagnose one."
        },
        "name": "workload",
        "plugin_release_skill_id": "pluginrsk_6abe7bd8f964819183d2107d1d9b431c"
      },
      {
        "description": "Production hardening for Control Plane workloads. Use when asked about JWT/Envoy auth, security context (runAsUser), health probe tuning, direct load balancers, geo-location headers, or graceful shutdown / termination.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "workload-security",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "bolt",
          "short_description": "Production hardening for Control Plane workloads. Use when asked about JWT/Envoy auth, security context (runAsUser), health probe tuning, direct load balancers, geo-location headers, or graceful shutdown / termination."
        },
        "name": "workload-security",
        "plugin_release_skill_id": "pluginrsk_6abe7bd78d108191a27d14d997ad2163"
      },
      {
        "description": "Diagnoses unhealthy Control Plane workloads. Use when asked why a workload is crashing, not starting, OOMKilled, ImagePullBackOff, returning 502s, failing health checks, unreachable, or stuck deploying.",
        "interface": {
          "brand_color": null,
          "default_prompt": null,
          "display_name": "workload-troubleshooting",
          "icon_large_url": null,
          "icon_small_url": null,
          "iconography": "radar",
          "short_description": "Diagnoses unhealthy Control Plane workloads. Use when asked why a workload is crashing, not starting, OOMKilled, ImagePullBackOff, returning 502s, failing health checks, unreachable, or stuck deploying."
        },
        "name": "workload-troubleshooting",
        "plugin_release_skill_id": "pluginrsk_6abe7bdcab608191b1e4ecae2c02f826"
      }
    ],
    "version": "1.1.0"
  },
  "scope": "GLOBAL",
  "status": "ENABLED"
}

SHA-256 of public snapshot: 13af649841838dbb72b30321e84fa4c92fdf09ed3a98d2f495bb6b11ba376033