skills.rest
crazygit
crazygitCOMMUNITY
Explore all skills by this author →
GitHub

kube-audit-kit

Export Kubernetes resources and generate security audit reports.

29|1|Updated Jan 10, 2026
Search Tags:#security#audit#compliance#rbac#kubernetes#read-only#network-policy
One-click install
npx skills add https://github.com/crazygit/kube-audit-kit --skill kube-audit-kit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kube-audit-kit
Source: https://github.com/crazygit/kube-audit-kit/tree/main
Command: npx skills add https://github.com/crazygit/kube-audit-kit --skill kube-audit-kit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, rich, and includes scripts (resource) components.

What problem does it solve?

This Skill provides a safe, read-only workflow to audit Kubernetes resources across contexts and namespaces, producing comprehensive security reports without impacting cluster state.

Core Features & Use Cases

  • Read-only Export: gathers all namespaced resources using kubectl get/list without modifying cluster state.
  • Automated Sanitization & Grouping: strips sensitive metadata, groups resources by workload topology, and links resources to applications.
  • Comprehensive Security Audits: runs script-based checks aligned to Pod Security Standards, NSA guidance, and CIS benchmarks, plus AI deep analysis for risk discovery.
  • Use Case: A security team audits prod and dev clusters to identify misconfigurations and policy gaps, generating a detailed audit report for compliance.

Quick Start

Set up the environment (uv sync), then run the four-step workflow: export, sanitize, group, and audit. The Agent will output results to a user-owned output directory (KUBE_AUDIT_OUTPUT) and generate an audit_report.md.

Frequently Asked Questions about kube-audit-kit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a read-only Kubernetes security audit without impacting cluster state?▼

A read-only Kubernetes security audit uses kubectl get/list to export namespaced resources, sanitize metadata, and generate compliant reports without modifying cluster state. The deterministic workflow evaluates pod security, RBAC, and network exposure safely.

What security standards are used for Kubernetes compliance checks in automated audits?▼

Kubernetes compliance checks align with Pod Security Standards, NSA guidance, and CIS benchmarks. The audit script evaluates configuration drift, RBAC policies, and network exposure to identify misconfigurations and policy gaps.

Can I audit multiple Kubernetes contexts and namespaces simultaneously?▼

Yes, you can audit multiple Kubernetes contexts and namespaces simultaneously. The workflow gathers resources across production, staging, and development environments, grouping resources by workload topology and linking them to applications.

How do I generate a Kubernetes audit report for compliance reviews?▼

To generate a Kubernetes audit report, run the four-step workflow: export, sanitize, group, and audit. The process outputs structured artifacts including audit_results.json and audit_report.md for compliance reviews.

Does the kube-audit-kit Skill require cluster administrator privileges to run?▼

The kube-audit-kit Skill performs read-only operations using kubectl get/list without modifying cluster state, requiring only read access. It safely gathers namespaced resources to assess pod security and RBAC configurations.

Related Skills

Explore More Software Engineering Skills→
phuetzphuetz
30

kubernetes

Consolidate kubectl, Helm, and ArgoCD workflows for Kubernetes cluster administration.

Community
Advanced
chrislyonschrislyons

dependency.audit

Audit npm, Python, and Rust dependencies for vulnerabilities, licenses, and upgrades.

Community
Intermediate
Azeem-2Azeem-2

docker-k8s

Automate secure Docker builds and Kubernetes deployments with GitOps pipelines.

Community
Advanced
blamejsblamejs

container-runtime-security

Audit Kubernetes Pod Security Standards and generate prioritized remediation plans.

Official
Advanced