k8s-security-audit

Audit Kubernetes security posture across RBAC, NetworkPolicy, Secrets, and container contexts.

1|Updated Nov 27, 2025
One-click install
npx skills add https://github.com/buenhyden/hy-home.k8s --skill k8s-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: k8s-security-audit
Source: https://github.com/buenhyden/hy-home.k8s/tree/main/.agents/skills/k8s-security-audit
Command: npx skills add https://github.com/buenhyden/hy-home.k8s --skill k8s-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Kubernetes security posture is often under-verified across RBAC, NetworkPolicy, Secrets, container security contexts, and image provenance. This skill provides a structured workflow to identify misconfigurations and policy gaps that could lead to breaches.

Core Features & Use Cases

  • Comprehensive RBAC and network policy analysis with actionable findings and recommendations.
  • Secrets handling and container security checks to enforce least privilege and safe runtime configurations.
  • End-to-end audit workflow across Kubernetes security domains, with remediation guidance and executive summaries.

Quick Start

Run a comprehensive Kubernetes security audit against your cluster to identify RBAC, NetworkPolicy, Secrets, and container security context gaps, then apply remediation guidelines.

Frequently Asked Questions about k8s-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Kubernetes RBAC and NetworkPolicy configurations for security gaps?

To audit Kubernetes RBAC and NetworkPolicy configurations, you can run a comprehensive security audit that identifies policy gaps and misconfigurations, then generates actionable findings with severity classifications and remediation guidance.

What is the best way to check Kubernetes Secrets and container security contexts?

The best way to check Kubernetes Secrets and container security contexts is using an end-to-end security audit workflow that verifies safe runtime configurations, enforces least privilege, and provides structured findings for remediation.

Can I verify image supply chain provenance during a Kubernetes security review?

Yes, you can verify image supply chain provenance during a Kubernetes security review by running an audit that checks image provenance alongside RBAC, networking, and secrets to ensure comprehensive cluster security posture verification.

Does this Kubernetes security audit provide a remediation plan for production clusters?

Yes, this Kubernetes security audit provides a remediation plan for production clusters by delivering structured findings, severity classifications, and an executive summary to guide the resolution of identified security posture gaps.

How do I run a Kubernetes security audit in a CI pipeline?

You can run a Kubernetes security audit in a CI pipeline by applying the end-to-end audit workflow to verify RBAC, networking, secrets, and image provenance, generating structured findings and remediation guidelines tailored for pipeline environments.