k8s-security-redteam

Identifies attack paths and validates hardening in authorized Kubernetes security assessments.

18|2|Updated Jan 30, 2026

Search Tags:#security #rbac #kubernetes #red-team #hardening #penetration-testing

Ready to run

npx skills add https://github.com/foxj77/claude-code-skills --skill k8s-security-redteam

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: k8s-security-redteam
Source: https://github.com/foxj77/claude-code-skills/tree/main/k8s-security-redteam
Command: npx skills add https://github.com/foxj77/claude-code-skills --skill k8s-security-redteam

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Authorized security testing of Kubernetes clusters to identify misconfigurations, attack paths, and weaknesses before attackers exploit them.

Core Features & Use Cases

Conduct comprehensive reconnaissance and surface mapping of Kubernetes clusters, including API access, RBAC posture, network policy gaps, and node/container exposure.
Validate hardening measures and security controls by simulating attacker techniques within an authorization boundary.
Use this for red-team exercises, blue-team validation, and ongoing hardening programs to reduce risk.

Quick Start

Identify misconfigurations and attack paths in an authorized Kubernetes security assessment.

Frequently Asked Questions about k8s-security-redteam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a Kubernetes red-team exercise safely?▼

Kubernetes red-team testing requires explicit written authorization before assessing cluster attack paths. You must maintain safe testing practices by mapping API access and pod security within a strict authorization boundary to avoid disrupting operations.

What is Kubernetes RBAC audit and how does it find attack paths?▼

Kubernetes RBAC audits analyze role permissions to identify privilege escalation paths. By mapping cluster surface exposure and network policy gaps, you validate hardening measures and discover misconfigurations attackers could exploit.

How do I verify Kubernetes network policy and pod security hardening?▼

Verifying Kubernetes network policy and pod security involves simulating attacker techniques within an authorized boundary. This validates that security controls effectively restrict lateral movement and container exposure across environments.

Can I use penetration testing for Kubernetes clusters in cloud environments?▼

Penetration testing applies to Kubernetes clusters across both on-prem and cloud environments. You conduct reconnaissance and attack path analysis to identify API access weaknesses and node exposure regardless of deployment platform.

What do I need for authorized Kubernetes security assessments?▼

Authorized Kubernetes security assessments require explicit written authorization and defined testing boundaries. You need access to evaluate cluster reconnaissance surfaces including API endpoints, RBAC posture, and node exposure.