kubernetes-checker

What problem does it solve?

This Skill eliminates the risk of deploying insecure, non-compliant Kubernetes manifests that cause production incidents, catching security misconfigurations, resource hygiene gaps, and policy violations at git diff time instead of after cluster deployment.

Core Features & Use Cases

• Comprehensive 2026 Hardening Validation: Checks manifests against the 2026 Kubernetes defense-in-depth baseline, including Pod Security Standards, NetworkPolicy default-deny, RBAC least-privilege, resource requests/limits, probe configuration, image digest pinning, and external secrets management.
• Multi-Tool Aggregation: Chains industry-standard linters and scanners (kube-linter, kube-score, kubeconform, kubesec, Trivy, Kyverno) to catch different families of issues, aggregating results into a unified report with severity tiers and remediation guidance.
• Use Case: A platform engineer can use this Skill to audit a new Helm chart before merging to production, ensuring it meets all security and operational best practices without manual review of every line of YAML.

Quick Start

Use the kubernetes-checker skill to audit all Kubernetes manifests and Helm charts in your current project for security, resource hygiene, and 2026 GitOps compliance issues.