auditing-kubernetes-rbac-privilege-escalation

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is high-risk dual-use material: it contains explicit, actionable instructions and tooling to enumerate RBAC, impersonate/mint tokens, read secrets, schedule privileged/hostPath pods, and exfiltrate host credentials, enabling credential theft, remote code execution, and host compromise.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's prerequisites explicitly download and later execute an upstream binary at runtime via curl -L https://github.com/PaloAltoNetworks/rbac-police/releases/latest/download/rbac-police-linux-amd64 -o rbac-police, which fetches remote executable code the workflow runs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using captured tokens and creating a privileged hostPath pod (manifest shown) that reads /host/etc/shadow, i.e., it directs actions that modify cluster state and can compromise the host.