OWASP Kubernetes / Infrastructure Security Skill

Audit Kubernetes and Docker deployments against the OWASP Kubernetes Top 10.

2|1|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/bigeasyfreeman/adlc --skill owasp-kubernetes-infrastructure-security-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: OWASP Kubernetes / Infrastructure Security Skill
Source: https://github.com/bigeasyfreeman/adlc/tree/main/skills/infra-security
Command: npx skills add https://github.com/bigeasyfreeman/adlc --skill owasp-kubernetes-infrastructure-security-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the security threats faced by container and infrastructure deployments, providing an assessment against the OWASP Kubernetes Top 10 (2025) standards.

Core Features & Use Cases

  • OWASP Kubernetes Top 10 Analysis: Checks for common security issues related to Kubernetes and Docker containers.
  • Workload Hardening: Verifies secure configurations for containers.
  • Authorization Policies: Ensures least privilege access controls are in place.
  • Secrets Management: Checks for secure storage and handling of sensitive data.
  • Network Segmentation: Ensures proper network configurations and segmentation.
  • Use Case: For organizations that need to conduct security audits on Kubernetes clusters or Docker containers before deployment.

Quick Start

Run the OWASP Kubernetes / Infrastructure Security Skill on your Dockerfiles or Kubernetes manifests to automatically perform a security check against the OWASP Kubernetes Top 10.

Frequently Asked Questions about OWASP Kubernetes / Infrastructure Security Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my Kubernetes manifests against the OWASP Kubernetes Top 10?

You can check Kubernetes manifests against the OWASP Kubernetes Top 10 by running an automated security audit that scans deployment configurations for workload hardening, authorization policies, secrets management, and network segmentation issues.

What is container security assessment for Docker and Kubernetes deployments?

Container security assessment is the process of scanning Docker and Kubernetes infrastructure configurations to identify vulnerabilities and ensure deployments comply with security checklists like the OWASP Kubernetes Top 10 standards.

Can I audit Dockerfiles for workload hardening and secrets management?

Yes, you can audit Dockerfiles by running a security assessment that verifies secure container configurations and checks for proper storage and handling of sensitive data according to infrastructure security standards.

How do I ensure least privilege access controls are in my Kubernetes cluster?

To ensure least privilege access controls in a Kubernetes cluster, perform an authorization policy audit that analyzes infrastructure manifests and verifies that proper network segmentation and workload hardening are configured.

Does a Kubernetes security assessment require access to deployment manifests?

Yes, a Kubernetes security assessment requires direct access to your container and infrastructure deployment manifests to accurately evaluate configurations against the OWASP Kubernetes Top 10 checklist.

When should I run a pre-deployment security audit on container infrastructure?

You should run a pre-deployment security audit on container infrastructure before launching Kubernetes clusters or Docker containers to identify and remediate authorization, network segmentation, and workload hardening vulnerabilities.

Related Skills