hunt-k8s
Warn
Audited by Snyk on Nov 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (low risk: 0.30). The skill is an offensive bug-bounty playbook whose state-changing steps (privileged container creation via docker.sock, ephemeral privileged containers, kubectl debug node) act on remote targets rather than the agent's own machine, and it does not ask for sudo, system-file edits, user creation, or SSH/systemd changes locally, though it does push the agent toward destructive actions on remote infrastructure.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata