skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

container-kubernetes

Audit Kubernetes clusters for API-server exposure, RBAC, and workload security.

Updated Jul 30, 2026
Search Tags:#security#audit#compliance#rbac#kubernetes#devsecops
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill container-kubernetes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: container-kubernetes
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/container-kubernetes
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill container-kubernetes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of maintaining Kubernetes security by automating the identification of misconfigurations, over-privileged access, and network policy gaps that could lead to cluster compromise.

Core Features & Use Cases

  • Posture Assessment: Validates API-server exposure, RBAC permissions, and pod security standards against industry best practices.
  • Risk Identification: Detects critical vulnerabilities like exposed etcd, anonymous API access, and host-path mounts in containers.
  • Use Case: A security engineer can use this skill to perform a comprehensive, read-only audit of a production cluster to ensure compliance with CIS benchmarks and internal security policies before a major deployment.

Quick Start

Use the container-kubernetes skill to perform a full security posture review of the cluster defined in the current scope.

Frequently Asked Questions about container-kubernetes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Kubernetes cluster security for compliance verification?▼

Kubernetes security auditing automates compliance verification by evaluating API-server exposure, RBAC configurations, and workload security settings against industry best practices. It performs read-only cluster analysis to generate evidence-based reports.

What Kubernetes misconfigurations lead to cluster compromise?▼

Kubernetes cluster compromise often stems from over-privileged RBAC access, exposed etcd, anonymous API access, network policy gaps, and host-path mounts in containers. Automated posture assessment identifies these vulnerabilities without modifying cluster state.

How do I perform a read-only security posture assessment of a production cluster?▼

Read-only security posture assessment of a production cluster validates pod security standards, RBAC permissions, and API-server exposure without modifying cluster state. It detects critical vulnerabilities and ensures compliance with CIS benchmarks before deployment.

Can I validate RBAC configurations and pod security standards without modifying cluster state?▼

Yes, you can validate RBAC configurations and pod security standards through read-only cluster analysis. This approach identifies over-privileged access and network policy gaps while ensuring the cluster state remains completely unmodified during the audit.

Does DevSecOps automated auditing detect exposed etcd and anonymous API access?▼

DevSecOps automated auditing detects exposed etcd and anonymous API access by identifying critical vulnerabilities in Kubernetes clusters. It evaluates workload security settings and API-server exposure to provide evidence-based compliance reporting.

Related Skills

Explore More Software Engineering Skills→
phuetzphuetz
30

kubernetes

Consolidate kubectl, Helm, and ArgoCD workflows for Kubernetes cluster administration.

Community
Advanced
Blake-JohnBlake-John

security-reviewer

Identify security vulnerabilities and generate structured audit reports with severity ratings.

Community
Advanced
abhijeetkakade1234abhijeetkakade1234
1

container-kubernetes-security-audit

Identify and remediate security misconfigurations in container images, Kubernetes workloads, and RBAC policies.

Community
Advanced
devkenidevkeni
1

container-security

Scan Docker images, audit Kubernetes clusters, and monitor container runtimes for security weaknesses.

Community
Advanced