In addition the skills teach the agent about which kubectl commands are mutating so it doesn’t treat them and normal Bash() commands and asks you for permission first.