skills.rest
anthril
anthrilOFFICIAL
Explore all skills by this author →
WebsiteGitHub

kubernetes-manifest-audit

Audit Kubernetes manifests against CIS and NSA/CISA hardening guidelines.

3|Updated Apr 1, 2026
Search Tags:#security#audit#rbac#kubernetes#cis-benchmark#nsa-hardening#kubernetes-manifest
One-click install
npx skills add https://github.com/anthril/official-claude-plugins --skill kubernetes-manifest-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kubernetes-manifest-audit
Source: https://github.com/anthril/official-claude-plugins/tree/main/plugins/devops/skills/kubernetes-manifest-audit
Command: npx skills add https://github.com/anthril/official-claude-plugins --skill kubernetes-manifest-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Kubernetes manifests can drift from security and operational best practices, leaving deployments vulnerable and harder to audit.

Core Features & Use Cases

  • Audits Kubernetes manifest groups for CIS and NSA hardening alignment across pod security, resources, probes, image hygiene, secrets/config, networking, RBAC, availability, and Helm hygiene.
  • Generates actionable findings and remediation guidance suitable for pull requests and change management.
  • Supports static, live, apply, and runtime modes to cover development to production-state checks.

Quick Start

Run the skill against your manifest directory to produce a remediation-ready report.

Frequently Asked Questions about kubernetes-manifest-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Kubernetes manifests for CIS and NSA hardening compliance?▼

You can audit Kubernetes manifests against CIS Kubernetes Benchmark and NSA/CISA hardening guidelines by running this skill against your manifest directory, which produces a structured set of findings with remediation guidance.

Does this Kubernetes manifest audit tool work with Helm charts and Kustomize overlays?▼

Yes, the Kubernetes manifest audit applies directly to Helm charts, Kustomize overlays, and raw manifest directories across a cluster, checking pod security, resources, probes, image hygiene, and RBAC configurations.

What security checks are included in a CIS and NSA Kubernetes manifest audit?▼

The audit covers pod security, resource limits, probes, image hygiene, secrets and config management, networking, RBAC, availability, and Helm hygiene to identify security and configurational gaps in your Kubernetes manifests.

Can I generate remediation guidance for Kubernetes manifest security findings in pull requests?▼

Yes, the audit generates actionable findings and remediation guidance suitable for pull requests and change management, providing a pass/fail verdict based on CIS and NSA hardening alignment.

What scanning modes are available for checking Kubernetes manifest security?▼

The audit supports static, live, apply, and runtime modes to cover development to production-state checks, allowing you to identify security drift across different stages of your Kubernetes deployment lifecycle.

Why do my Kubernetes deployments drift from security best practices after initial configuration?▼

Kubernetes manifests can drift from security and operational best practices over time, leaving deployments vulnerable; auditing against CIS and NSA hardening guidelines identifies these gaps and provides structured remediation steps.

Related Skills

Explore More Software Engineering Skills→
openchoreoopenchoreo
5

openchoreo-import

Plan OpenChoreo migrations from Helm charts, Kustomize overlays, Docker Compose, or Kubernetes YAML.

Official
Advanced
NickCrewNickCrew
29

kubernetes-security-policies

Enforce Kubernetes security policies across clusters and namespaces.

Community
Advanced
Lobbi-DocsLobbi-Docs
18

Container Security

Audit and harden container images and runtimes for vulnerabilities and misconfigurations.

Official
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

policy-as-code-end-to-end-enforcement

Enforce security policies across local development, CI pipelines, and Kubernetes runtime.

Official
Advanced