Audit Kubernetes and OpenShift clusters for RBAC, NetworkPolicy, pod security, and compliance gaps.
npx skills add https://github.com/kcns008/clusterclaw --skill security-kcns008
Please help me install this Agent Skill. Skill: security Source: https://github.com/kcns008/clusterclaw/tree/main/.claude/skills/security Command: npx skills add https://github.com/kcns008/clusterclaw --skill security-kcns008
This Skill helps platform teams find and fix Kubernetes and OpenShift security risks before they become incidents, reducing exposure from weak RBAC, missing NetworkPolicies, unsafe pod settings, and noncompliant workloads.
Ask the security skill to audit my Kubernetes or OpenShift cluster for RBAC, NetworkPolicy, pod security, and compliance issues.
High-intent search queries and answers about installing and using this skill.
Run a cluster-wide security posture audit to detect privileged containers, root execution, host namespace usage, and service account risks. It reviews RBAC for overly broad bindings and checks for missing Pod Security Admission labels to harden Kubernetes and OpenShift environments.
Review namespaces for missing default deny policies and identify risky workloads. This skill checks NetworkPolicy coverage and helps enforce zero-trust controls using Kyverno and OPA Gatekeeper to restrict cluster traffic.
Yes, this skill leverages Trivy and kube-bench with oc CLI access to support CIS benchmark checks and image vulnerability scanning. It detects compliance drift and identifies supply chain risks in OpenShift environments.
Yes, kubectl or oc CLI access is required to review secrets management workflows and image signature verification. The skill uses JSON-aware parsing with jq and integrates with tools like Vault to assess cluster security.
Execute a cluster-wide review to detect namespaces lacking default deny NetworkPolicies, risky workloads, and compliance gaps. This allows platform engineers to prioritize remediation of security issues before they become incidents.
Auditing requires CLI access to kubectl or oc and depends on tools like Trivy, grype, and kube-bench. While it detects policy gaps and compliance drift, remediation of risky workloads, RBAC wildcards, and unsafe pod settings requires manual intervention.
jayjpatel9717Scan Docker images and audit Kubernetes clusters for security vulnerabilities.
TheBushidoCollectiveEnforce Kubernetes security hardening for deployments with RBAC, pod security, and network policies.
NickCrewEnforce Kubernetes security policies across clusters and namespaces.
zzw4257Audit Kubernetes clusters against the CIS Kubernetes Benchmark.
