hunt-k8s

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs reading service-account tokens and other secret bytes and embedding them verbatim into commands/headers (e.g., Authorization: Bearer $TOKEN, echo/decoding token), which requires the LLM/agent to handle and output secret values directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive exploitation guide for Kubernetes/Docker that details methods for unauthorized credential theft, data exfiltration, remote code execution, and host compromise.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating privileged containers via the Docker socket (bind-mounting host /), running privileged debug containers and patching ephemeral containers—actions that modify host/container state and can give host-root access if executed on the agent's host.