hunt-k8s

Warn

Audited by Snyk on Nov 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill is an offensive bug-bounty playbook whose state-changing steps (privileged container creation via docker.sock, ephemeral privileged containers, kubectl debug node) act on remote targets rather than the agent's own machine, and it does not ask for sudo, system-file edits, user creation, or SSH/systemd changes locally, though it does push the agent toward destructive actions on remote infrastructure.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 12, 2026, 05:47 PM
Issues
1