kubernetes-specialist
Fail
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a link to documentation at
https://jeffallan.github.io/claude-skills/skills/infrastructure/kubernetes-specialist/. This URL has been flagged as malicious by security scanners. - [REMOTE_CODE_EXECUTION]: Instructions in
references/service-mesh.mdandreferences/multi-cluster.mddescribe downloading and executing scripts directly in the shell using patterns such ascurl | shandcurl | bash. These patterns target installation endpoints for Istio, Linkerd, and Submariner. - [PRIVILEGE_ESCALATION]: The skill recommends using
sudoto install theclusterctlbinary into a system-protected directory (/usr/local/bin/). - [COMMAND_EXECUTION]: The skill makes extensive use of system commands including
kubectlandhelmto perform administrative tasks, workload management, and debugging. Examples includekubectl execto run commands within containers andkubectl logsto access pod logs.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata