skills.rest
luiscamaral
luiscamaralCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Audit Kubernetes RBAC, network policies, and pod security with kubectl and jq.

1|1|Updated Jan 3, 2026
Search Tags:#compliance#rbac#kubernetes#pod-security#network-policies#audit-script
One-click install
npx skills add https://github.com/luiscamaral/k8s-cell-platform-skills --skill security-audit-luiscamaral
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/luiscamaral/k8s-cell-platform-skills/tree/main/security-audit
Command: npx skills add https://github.com/luiscamaral/k8s-cell-platform-skills --skill security-audit-luiscamaral

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires kubectl, jq, and includes scripts (resource) components.

What problem does it solve?

Audits and validates the security posture of the Kubernetes Cell Platform, identifying misconfigurations in RBAC, network policies, and pod security that could lead to unauthorized access or data exposure.

Core Features & Use Cases

  • RBAC visibility and risk checks: Identify overly permissive bindings and verify least-privilege practices across clusters.
  • Network policy verification: Trace and validate that network policies are in place and correctly configured across namespaces.
  • Pod security posture checks: Detect privileged containers and risky host access patterns.
  • Compliance mapping: Map findings to CIS Kubernetes Benchmark and platform-specific controls.

Quick Start

Run the security-audit to scan RBAC bindings, network policies, and pod security across your clusters and generate a consolidated report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Kubernetes RBAC permissions for overly permissive bindings?▼

To audit Kubernetes RBAC permissions, this Skill runs deterministic checks via kubectl and jq to identify overly permissive bindings and verify least-privilege practices across clusters and namespaces.

Can I check pod security posture and detect privileged containers in my cluster?▼

You can check pod security posture to detect privileged containers and risky host access patterns using deterministic script checks that validate configurations against platform-specific controls.

How do I validate Kubernetes network policies across multiple namespaces?▼

Validating Kubernetes network policies is performed by tracing and verifying that policies are correctly configured across namespaces, generating structured outputs that map findings to compliance benchmarks.

Does this security audit map findings to CIS Kubernetes Benchmark controls?▼

Yes, the security audit maps findings to CIS Kubernetes Benchmark and platform-specific controls, utilizing a reference checklist to ensure compliance verification across the cluster.

Do I need kubectl and jq installed to run this Kubernetes compliance check?▼

Yes, you need kubectl and jq installed as dependencies, because the audit implements deterministic checks and reporting via shell scripts that rely on these tools to query and parse cluster resources.

What is the best way to generate a consolidated Kubernetes security report?▼

The best way to generate a consolidated Kubernetes security report is running this audit to scan RBAC, network policies, and pod security, producing structured outputs for compliance verification.

Related Skills

Explore More Software Engineering Skills→
Matchpoint-AIMatchpoint-AI

rackspace-spot-access

Retrieve a Rackspace Spot kubeconfig and debug ARC runners with spotctl.

Official
Advanced
forefyforefy
122

infrastructure-audit

Audit infrastructure security across IaC, containers, Kubernetes, and cloud configurations.

Community
Advanced
EngineerWithAIEngineerWithAI
4

k8s-security-policies

Implement Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC security policies.

Official
Advanced
Greenmamba29Greenmamba29

audit-log-monitor

Monitor security audit logs and generate real-time alerts for unauthorized access.

Community
Advanced