Agentic Engineering For Apache Kafka — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agentic Engineering For Apache Kafka (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A collection of agent skills that turn AI agents and coding tools such as Claude Code and Cursor into Kafka-specialised engineering assistants. Audit topic configurations, diagnose consumer lag, review schema changes, review connectors and DLQs, catch security misconfigurations and tune performance, all from a single prompt instead of 15 minutes of manual exploration or investigation.
Maintained by Lenses.io, the team that pioneered the developer experience for Apache Kafka. Agentic engineering has shifted what that means. Making sure an AI agent knows how to handle streaming data is now part of the job.
A Kafka MCP server gives agents access to your live cluster: topics, consumer groups, connectors, schemas and metrics. The skills in this repository teach agents expertise: best practices, audit thresholds, remediation playbooks and standard workflows. Together they enable AI-powered Kafka engineering where the agent doesn't just read your cluster, it knows what to look for and how to fix it.
Without skills, agents are confident generalists. They will write a consumer for the orders topic that compiles and runs but does not handle deserialization errors properly, set up DLQs correctly, or partition consumption sensibly for the topic's layout. Skills close the gap between code that runs in a demo and code that holds up in production.
These skills follow the Anthropic open standard for skills, so they are portable across Claude Code, Cursor, Claude.ai and the Claude Messages API. They are MCP-agnostic by design: every skill in this repo is tested against Lenses MCP Server (the recommended setup), but will work with any Kafka MCP server that exposes similar tools.
The quickest way to try the skills end-to-end is with the free Lenses Community Edition, which ships with Lenses HQ, a remote MCP Server and a pre-configured single-broker Kafka cluster with demo data.
| Skill | Invocation | Description | Frequency |
|---|---|---|---|
| Topic Audit | /kafka-topic-audit | Audits topic configs against best practices: replication factor, retention, partitions, compaction, naming conventions, orphaned topics and missing metadata. | Daily/weekly |
| Consumer Lag | /kafka-consumer-lag | Analyses consumer group lag and diagnoses root causes (throughput bottlenecks, rebalancing, partition skew, stalled consumers) with remediation suggestions. | Daily/on-incident |
| Perf Review | /kafka-perf-review | Reviews producer/consumer performance configs in both the live cluster and the codebase. Flags un-tuned defaults, anti-patterns and missing best practices. | Per-change |
| Schema Review | /kafka-schema-review | Reviews schema changes (Avro, Protobuf, JSON Schema) for compatibility, breaking changes, missing defaults, naming issues and schema drift. | Per-PR |
| Security Audit | /kafka-security-audit | Audits authentication (SASL), encryption (SSL/TLS), secrets management and environment-tier mismatches across codebase and cluster. | Monthly/pre-deploy |
| Connector Review | /kafka-connector-review | Reviews Kafka Connect configurations: error handling, DLQ setup, converters, transforms, task count and task health. | Per-change |
| DLQ Review | /kafka-dlq-review | Reviews dead letter queue completeness: topic config, monitoring, metadata preservation, retry logic, reprocessing paths and connector DLQ alignment. | Periodic |
| Python Client | /kafka-python-client | Scaffolds a production-ready Python Kafka producer and consumer using confluent-kafka-python, with Schema Registry, graceful shutdown, idempotent producer and tests. Discovers the target topic, partition count and registered schema from the live cluster via MCP before asking. | Per-project |
| ShadowTraffic | /kafka-shadowtraffic | Generates a ready-to-run shadowtraffic-config.json and Docker command to populate a Kafka topic with realistic synthetic data. Discovers the target topic, its key and value schemas and the correct serializers from the live cluster via MCP before writing the config. | On-demand |
| ShadowTraffic Java | /kafka-shadowtraffic-java | Scaffolds a JUnit 5 TestContainers class that spins up ShadowTraffic in-process to stream synthetic data into a Kafka topic during tests. Chains the ShadowTraffic skill to build the config, then wires Kafka, optional Schema Registry and ShadowTraffic containers together for Maven or Gradle projects. | Per-project |
Every skill is implemented for both Claude Code and Cursor from a single source of truth at the repo root. The repository itself is the plugin.
.claude-plugin/
├── marketplace.json # Claude marketplace catalog
└── plugin.json # Claude plugin manifest
.cursor-plugin/
├── marketplace.json # Cursor marketplace catalog
└── plugin.json # Cursor plugin manifest
assets/
└── logo.svg # Plugin logo
skills/ # Shared SKILL.md definitions and references
├── kafka-topic-audit/
├── kafka-consumer-lag/
├── kafka-perf-review/
├── kafka-schema-review/
├── kafka-security-audit/
├── kafka-connector-review/
├── kafka-dlq-review/
├── kafka-python-client/
├── kafka-shadowtraffic/
└── kafka-shadowtraffic-java/All skills follow the Anthropic open standard for skills with progressive disclosure: frontmatter with trigger phrases, negative triggers and categorised metadata; a references/ directory for detailed lookup tables and test cases loaded on demand; success criteria with quantitative and qualitative metrics; concrete usage examples; troubleshooting for common errors; and validation gates between workflow steps.
/plugin marketplace add lensesio/agentic-engineering-for-apache-kafka
/plugin install kafka-skills@lensesioThis installs all the Kafka skills as a single kafka-skills plugin.
Pull updates with /plugin update kafka-skills@lensesio whenever a new release is published.
npx skills add lensesio/agentic-engineering-for-apache-kafkaThis cross-tool Skills CLI (npx skills) installs all Kafka skills from the skills.sh directory.
The CLI auto-detects the agents you have installed (Cursor, Claude Code, Codex, OpenCode, Continue and 50+ others) and copies the skills into the right per-agent folder.
To install only a specific skill (the ten valid skill names are kafka-topic-audit, kafka-consumer-lag, kafka-perf-review, kafka-schema-review, kafka-security-audit, kafka-connector-review, kafka-dlq-review, kafka-python-client, kafka-shadowtraffic, kafka-shadowtraffic-java):
npx skills add lensesio/agentic-engineering-for-apache-kafka --skill kafka-topic-auditTo install globally (~/-scoped) instead of in the current project:
npx skills add lensesio/agentic-engineering-for-apache-kafka -gAfter installing skills, configure the Lenses MCP server (or any Kafka MCP that exposes an equivalent tool surface will work).
Verify by asking, "Run a topic audit on staging" (or your environment name).
Skills auto-trigger from their description. For explicit slash invocation, use the namespaced form, e.g. /kafka-skills:kafka-topic-audit.
See TROUBLESHOOTING.md if a skill fails to load.
The skills actively audit these conventions in your cluster or codebase:
<domain>.<entity>.<event> (e.g. orders.payment.completed) - checked by kafka-topic-auditenable.idempotence=true) - checked by kafka-perf-reviewkafka-perf-reviewNo single team has seen every Kafka problem. The engineer running 200 topics on a multi-tenant cluster knows things we do not. The team that spent a month debugging a connector edge case has context that belongs in a skill file. If you have caught yourself coaching an agent through the same Kafka problem more than twice, that is a skill waiting to be written.
We welcome contributions across all three of the engineer profiles these skills serve: data engineers (schemas, pipeline reliability, data quality), backend engineers (clean produce/consume without getting buried in internals) and streaming data engineers (state, windowing, exactly-once). The Kafka surface is vast and these skills only scratch it. Kafka Streams, ksqlDB, MirrorMaker, deeper Schema Registry workflows, cluster upgrades, capacity planning, ACL audits, quota tuning and tiered storage review are all good candidates.
See CONTRIBUTING.md for how to propose a new Kafka skill, the structural conventions every skill follows (frontmatter, references/, test cases, single source of truth shared by the Cursor and Claude Code plugins), and what good first contributions look like. Bug reports, doc improvements and prompt-engineering tweaks are all welcome too.
confluent-kafka-python - the Python Kafka client library used by the kafka-python-client skill (requires Python 3.10+)vercel-labs/skills)Released under the MIT License. See the LICENSE file for the full text.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.