manyclaws-k8s
Warn
Audited by Socket on Jun 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: local namespace kubectl operations are proportionate to the stated Kubernetes purpose, but the 'friend' workflow introduces an unverified intermediary controller that receives a Bearer token and performs cross-namespace actions over internal HTTP. That data flow is not clearly documented or independently verifiable, so the skill is coherent in purpose but carries medium risk from credential forwarding and controller trust.
Confidence: 100%Severity: 60%
Audit Metadata