kube-bench

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is coherent with its stated purpose: it runs kube-bench for Kubernetes hardening review and does not route data or credentials to third-party services. Main risk is that it gives an AI agent autonomous security-scanning capability against Kubernetes environments; supply-chain concerns are limited because the referenced tool is an official Aqua Security project, though upstream install methods are not strongly pinned or checksum-verified.

Confidence: 90%Severity: 72%
Audit Metadata
Analyzed At
Sep 3, 2026, 02:39 AM
Package URL
pkg:socket/skills-sh/timsonner%2Fagent-skills%2Fkube-bench%2F@65ca25d183f7c47cd8b490a8a9540c316e624f3bc336c25193165465ad73da79