k8s-security-policies
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and templates for Kubernetes security hardening. It correctly identifies the removal of PodSecurityPolicy in K8s v1.25+ and recommends modern alternatives like Pod Security Standards and Admission Controllers (Gatekeeper/Kyverno).
- [SAFE]: Instructions for Network Policies and RBAC follow the principle of least privilege, specifically recommending a default-deny-all approach for networking and providing targeted RBAC templates.
- [SAFE]: No suspicious remote downloads, obfuscated code, or persistence mechanisms were found. All referenced tools (kubectl, Istio, Gatekeeper) and CNI plugins (Calico, Cilium) are industry-standard components for Kubernetes environments.
- [SAFE]: The security warnings and pitfalls sections provide accurate advice to prevent accidental lockouts or security gaps during policy implementation.
Audit Metadata