kubernetes-security-audit

What problem does it solve?

This Skill finds security misconfigurations in Kubernetes manifests that general-purpose review often misses, helping prevent privilege escalation, data exposure, and unsafe workload settings before deployment.

Core Features & Use Cases

• RBAC Analysis: Reviews Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings for wildcard permissions, dangerous verbs, and overbroad access.
• Pod and Workload Security: Checks Deployments, StatefulSets, DaemonSets, Jobs, CronJobs, and Pods for root execution, privilege escalation, host namespace access, and missing hardening settings.
• Network, Secrets, and Image Review: Validates NetworkPolicies, secret handling, image pinning, service accounts, and Pod Security Standards, with EKS-specific checks when AWS-managed Kubernetes is present.
• Use Case: A platform engineer can run this Skill against a Helm chart or manifest bundle to catch insecure RBAC, missing network isolation, and weak container security before merge.

Quick Start

Ask the Kubernetes security audit skill to review the attached manifests for RBAC, pod security, network policy, secret handling, and image risks.