k8s-security-policies
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides defensive configuration templates for Kubernetes environments, promoting security best practices such as least-privilege access and network segmentation.
- [DATA_EXPOSURE]: While the skill contains instructions for managing Kubernetes Secrets, it includes prominent warnings that credential material is sensitive and recommends restricted resource access via specific resourceNames.
- [NETWORK_OPERATIONS]: NetworkPolicy templates demonstrate security hardening by explicitly excluding the cloud provider metadata service IP (169.254.169.254) from egress rules to prevent SSRF-based credential exfiltration.
- [INDIRECT_PROMPT_INJECTION]: The skill references external supporting material (e.g.,
pod-security-template.yaml). It mitigates this attack surface by including strict instructions for the agent to inspect file contents, verify licenses, and confirm execution prerequisites before use, while prohibiting the fabrication of missing files.
Audit Metadata