container-security

SUSPICIOUS. The skill is internally coherent for container/Kubernetes security assessment, but its footprint is high-risk because it equips the agent with offensive security capabilities against live clusters and hosts, including escape testing and privilege escalation. Install sources are mostly official, lowering malware concerns, yet the unpinned raw Kubescape installer and active exploit workflows keep overall security risk high.

This is security-testing documentation containing several high-impact container escape and privilege-escalation procedures. It does not itself establish persistence, exfiltrate data, or behave as package malware, but the included commands are operationally dangerous and can compromise a host or Kubernetes cluster when prerequisites are met. It should be restricted to authorized isolated environments, with the exploit snippets replaced by read-only detectors where possible.

This is an offensive container-escape reference containing highly dangerous, directly executable commands for host compromise, persistence, reverse-shell access, Docker socket abuse, cgroup escape, namespace entry, and Kubernetes privilege escalation. It is not itself package malware or obfuscated code because the fragment contains no automatic execution mechanism or concealed payload, but using these commands outside an authorized lab or engagement could cause severe compromise.