Summary

New Claude Code plugin that helps users analyze Kubernetes platform activity and assists service providers in creating activity timelines for their consumers.

Plugin Structure

plugins/datum-activity/
├── .claude-plugin/
│   └── plugin.json           # Plugin manifest
├── agents/
│   ├── activity-analyst.md   # Investigates platform activity
│   └── timeline-designer.md  # Helps create ActivityPolicy resources
├── commands/
│   └── investigate.md        # /investigate command
└── skills/
    ├── investigate/          # Query and investigation skill
    ├── policy-design/        # ActivityPolicy design skill
    └── analytics/            # Activity analytics skill

Agents

activity-analyst

• Investigates platform activity using the Activity MCP server
• Helps answer questions like "who deleted my pod?" or "what changed in production?"
• Uses 16 MCP tools for querying audit logs, activities, and events

timeline-designer

• Helps service providers create ActivityPolicy resources
• Guides through the design process from requirements to testing
• Uses PolicyPreview tool to test policies before deployment

Skills

investigate

• Query audit logs, activities, and events
• Find failed operations, resource history, user activity
• CEL filter reference and common patterns

policy-design

• ActivityPolicy structure and templates
• Match expression and summary template reference
• Step-by-step design workflow

analytics

• Activity timeline analysis
• Period comparison
• Report generation templates

Commands

/investigate
Natural language activity investigation:

/investigate who deleted the api-gateway deployment
/investigate what changed in production in the last hour
/investigate failed operations in the last 24 hours

Prerequisites

The Activity MCP server must be running:

activity mcp --kubeconfig ~/.kube/config

Integration

This plugin integrates with the Activity service MCP server which provides:

• query_audit_logs / get_audit_log_facets
• query_activities / get_activity_facets
• query_events / get_event_facets
• find_failed_operations / get_resource_history / get_user_activity_summary
• get_activity_timeline / summarize_recent_activity / compare_activity_periods
• list_activity_policies / preview_activity_policy

Test plan

• Install plugin in Claude Code
• Verify agents are available
• Test /investigate command
• Test against staging API with MCP server
• Verify skill documentation is accurate

🤖 Generated with Claude Code