The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill's Dockerfile example contains a build-time network request to an external domain (security-scan.example.com) using Python's urllib.request. This creates an unauthenticated outbound connection to a non-whitelisted destination which could be used for data exfiltration.
[DYNAMIC_EXECUTION]: Dockerfile instructions use python -c to execute arbitrary Python logic during the container build process, including using subprocess.run to check for system updates. This practice bypasses static analysis and can be used to hide malicious activity during image construction.
[PRIVILEGE_ESCALATION]: The provided Kubernetes ClusterRole manifest grants get, list, and watch permissions on secrets to the default ServiceAccount in the production namespace. This violates the principle of least privilege and allows any pod running with the default account to access all secrets in the cluster.
[UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The ArgoCD configuration allows automated image updates using unconstrained tag patterns (*). This could lead to the deployment of untrusted images if the registry or the GitOps pipeline is compromised.

docker-k8s