security-auditor

Audit KrakenD configurations for vulnerabilities and authentication gaps.

3|1|Updated Dec 15, 2025
One-click install
npx skills add https://github.com/krakend/claude-code-plugin --skill security-auditor-krakend
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-auditor
Source: https://github.com/krakend/claude-code-plugin/tree/main/skills/security-auditor
Command: npx skills add https://github.com/krakend/claude-code-plugin --skill security-auditor-krakend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

KrakenD configurations often contain misconfigurations that expose authentication gaps, insecure endpoints, or weak defaults. This Skill provides thorough security auditing capabilities to detect vulnerabilities, misconfigurations, and policy violations, while accommodating Flexible Configuration variants.

Core Features & Use Cases

  • Three-tier audit approach: native KrakenD audit, Docker-based checks, and basic checks to cover a wide range of deployment models.
  • Flexible Configuration awareness: auto-detects CE/EE variants (templates vs flexible_config.json) and adapts audits accordingly.
  • Actionable remediation: reports exact locations, fixes, and relevant docs to remediate findings.
  • Pre- and post-deployment reviews: suitable for secure-by-default checks before production and after configuration changes.

Quick Start

Run a security audit on my current KrakenD configuration and review the resulting findings.

Frequently Asked Questions about security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a KrakenD configuration for security vulnerabilities and authentication gaps?

You can audit KrakenD configurations for security vulnerabilities by running this skill to identify authentication gaps and misconfigurations. It produces actionable remediation guidance with exact locations and fixes tailored to your setup.

What is the best way to run a pre-deployment security check on KrakenD flexible configuration?

The best way to run pre-deployment security checks on KrakenD flexible configuration is to use an auditing tool that detects CE and EE variants. This skill auto-detects templates and flexible_config.json to adapt its security review accordingly.

Does KrakenD security auditing work with Docker-based deployments and native configurations?

Yes, KrakenD security auditing works with Docker-based deployments and native configurations. This skill employs a three-tier audit approach covering native KrakenD, Docker-based checks, and basic checks across different deployment models.

How does KrakenD configuration auditing handle Community Edition and Enterprise Edition variants?

KrakenD configuration auditing handles CE and EE variants by automatically detecting runtime environments and flexible configuration variants. This skill adapts its audit logic to match the specific edition and configuration format in use.

Why does my KrakenD configuration expose insecure endpoints and weak defaults?

KrakenD configurations often expose insecure endpoints and weak defaults due to misconfigurations and policy violations. Running a security audit identifies exact locations of these vulnerabilities and provides references to KrakenD documentation for remediation.

Can I run a post-change security review on my KrakenD API gateway configuration?

Yes, you can run post-change security reviews on KrakenD API gateway configurations. This skill supports secure-by-default checks after configuration changes to identify any newly introduced authentication gaps or security misconfigurations.