skills.rest
bpnrockstar
bpnrockstarCOMMUNITY
Explore all skills by this author →
GitHub

container-security

Detect container escape vectors and Kubernetes RBAC misconfigurations.

Updated Jul 1, 2026
Search Tags:#container security#container escape#Kubernetes security#RBAC abuse#Kubernetes audit
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill container-security-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: container-security
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/container-security
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill container-security-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a robust methodology for identifying security vulnerabilities in containerized environments and Kubernetes clusters, addressing key risks like container escape vectors, RBAC abuse, and misconfigurations.

Core Features & Use Cases

  • Container Reconnaissance: Detect container runtime versions and check for privilege escalation opportunities.
  • Container Escape Vectors: Analyze potential escape paths such as Docker and containerd socket access.
  • Kubernetes Security: Examine Kubernetes RBAC settings, service account token theft, and node/cluster admin escalations.
  • Use Case: When performing a security audit on a Kubernetes cluster, this Skill can be used to uncover potential security breaches, such as unauthorized access to sensitive data or the potential for code execution on host systems.

Quick Start

Analyze container security in a Kubernetes cluster using the 'container-security' skill.

Frequently Asked Questions about container-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect container escape vectors in Docker and containerd environments?▼

You can detect container escape vectors by analyzing access to Docker and containerd sockets and checking for privilege escalation opportunities in the container runtime.

How do I check Kubernetes RBAC settings for misconfigurations and abuse?▼

Kubernetes RBAC abuse is checked by examining RBAC settings to identify misconfigurations that could allow unauthorized node or cluster admin escalations and service account token theft.

What is the best way to perform a security audit on a Kubernetes cluster?▼

A Kubernetes security audit uncovers potential breaches by comprehensively examining RBAC configurations, service account tokens, and container runtime vulnerabilities to identify unauthorized access paths.

Can I use this to detect service account token theft in Kubernetes?▼

Yes, this Skill detects Kubernetes service account token theft by examining cluster configurations and identifying potential paths for node and cluster admin escalations.

How do container runtime vulnerabilities lead to unauthorized code execution on host systems?▼

Container runtime vulnerabilities expose escape paths where attackers access underlying host sockets, allowing unauthorized code execution and potential access to sensitive data on host systems.

What are the limitations when analyzing container security for large Kubernetes clusters?▼

While it detects misconfigurations and runtime vulnerabilities, it focuses on identifying security risks rather than automatically patching them, requiring manual remediation of discovered cluster issues.

Related Skills

devkenidevkeni
1

container-security

Scan Docker images, audit Kubernetes clusters, and monitor container runtimes for security weaknesses.

Community
Advanced
robit-manrobit-man

container-forensics

Audit Docker and Kubernetes environments for security risks and compromise indicators.

Community
Advanced
hardw00thardw00t
90

container-security

Automates container security assessments across Docker images, Kubernetes clusters, and runtimes using Trivy, Grype, Kubescape, kube-bench, and Falco.

Community
Advanced
tedtv1007-ctrltedtv1007-ctrl

k8s-security-policies

Implement Kubernetes network policies, pod security standards, and RBAC configurations.

Community
Advanced