The Agent Skills Directory

High-Privilege Kubernetes Configuration: The skill creates Kubernetes Jobs that utilize hostNetwork: true and add the NET_ADMIN and NET_RAW Linux capabilities. These configurations are necessary for the skill's intended function of capturing network traffic on node-level interfaces but represent a significant level of access within the cluster environment. The skill includes a 'Host Capability Gate' to ensure these operations only run where permitted.
Sensitive Data Collection: The primary function of this skill is to collect packet captures (pcap files) and Azure network configuration. Packet captures can contain sensitive application data or credentials transmitted over the network. The skill addresses this by providing an explicit authorization framework in capture-authorization.md and recommending bounded captures with BPF filters.
Dynamic Command Generation: The traffic generation and capture retrieval scripts dynamically assemble shell command strings that are executed within target pods using kubectl exec and kubectl debug. The skill mitigates risks by using predefined script templates and performing validation on input parameters like pod names and durations.
Use of Vendor-Owned Container Images: The workflow relies on container images (e.g., Retina and Busybox) hosted on mcr.microsoft.com, which is the official Microsoft Container Registry. Using pinned images from the vendor's own registry is a standard practice for maintaining supply chain integrity.

aks-network-capture