kubernetes-specialist

Fail

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides a link to documentation at https://jeffallan.github.io/claude-skills/skills/infrastructure/kubernetes-specialist/. This URL has been flagged as malicious by security scanners.
  • [REMOTE_CODE_EXECUTION]: Instructions in references/service-mesh.md and references/multi-cluster.md describe downloading and executing scripts directly in the shell using patterns such as curl | sh and curl | bash. These patterns target installation endpoints for Istio, Linkerd, and Submariner.
  • [PRIVILEGE_ESCALATION]: The skill recommends using sudo to install the clusterctl binary into a system-protected directory (/usr/local/bin/).
  • [COMMAND_EXECUTION]: The skill makes extensive use of system commands including kubectl and helm to perform administrative tasks, workload management, and debugging. Examples include kubectl exec to run commands within containers and kubectl logs to access pod logs.
Recommendations
  • AI detected serious security threats
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 27, 2026, 01:36 AM