The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download the kube-bench binary and Kubernetes Job manifests directly from Aqua Security's official GitHub repository (github.com/aquasecurity/kube-bench). These are well-known, trusted security tools and the downloads are standard installation procedures for this software.
[COMMAND_EXECUTION]: The scripts/agent.py file uses subprocess.run() to execute the kube-bench binary. This is the primary function of the script—to automate the execution of the audit tool and parse its JSON output. The commands are constructed using predefined arguments and do not incorporate unsanitized user input.
[COMMAND_EXECUTION]: The SKILL.md file contains documentation for manual remediation steps, such as using chmod, chown, and editing Kubernetes manifests. These are standard system administration tasks required to implement the security hardening recommendations provided by the audit tool.

benchmarking-kubernetes-with-kube-bench