k8s-yaml-generator

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
examples/configmap-secret.yaml

The YAML is a conventional Kubernetes configuration and does not contain apparent malware or sabotage. However, it embeds reusable credentials and an API key in base64-encoded form, which is not encryption and should be treated as credential disclosure. Use an external secret manager or securely provisioned secrets, rotate the exposed values, and restrict Secret access with RBAC. The default namespace is also not ideal for production isolation.

Confidence: 99%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:27 PM
Package URL
pkg:socket/skills-sh/akin-ozer%2Fcc-devops-skills%2Fk8s-yaml-generator%2F@6b11a551903d3c1ab17a22ba678b9613a03e0a7fc275b5f3b557809e10804f61