The Agent Skills Directory

[COMMAND_EXECUTION]: The Python scripts scripts/agent.py and scripts/process.py utilize the subprocess.run function to interact with the kubectl command-line tool. These calls are used to gather security configuration data from the cluster in JSON format. The implementation uses argument lists rather than shell strings, preventing command injection vulnerabilities.\n- [EXTERNAL_DOWNLOADS]: The documentation in references/workflows.md references the official installation script for the kubescape security tool. Kubescape is a widely recognized and well-known service in the Kubernetes security ecosystem used for scanning cluster compliance.\n- [REMOTE_CODE_EXECUTION]: An example CI/CD workflow in references/workflows.md demonstrates the installation of kubescape by piping a remote shell script into bash. This pattern is standard for the installation of this specific well-known security tool and is provided as documentation for the user's infrastructure automation.\n- [INDIRECT_PROMPT_INJECTION]: The skill audits resources (Pods and Namespaces) within a Kubernetes cluster, which constitutes processing external, potentially untrusted data. The skill mitigates risks by parsing this data specifically as structured JSON and evaluating it against a strict set of security standard rules.\n
Ingestion points: Kubernetes API resource definitions fetched via kubectl in scripts/agent.py and scripts/process.py.\n
Boundary markers: None explicitly defined, as the skill operates on structured API responses.\n
Capability inventory: The skill can perform read and label operations on Kubernetes namespaces and pods via subprocess calls to kubectl.\n
Sanitization: External data is processed using the standard json library, which ensures that data fields are treated as values rather than executable instructions.

implementing-kubernetes-pod-security-standards