k8s-security-policies
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides legitimate guidance for securing Kubernetes clusters. The templates follow security best practices, such as Template 6 in
assets/network-policy-template.yamlwhich explicitly blocks access to the cloud metadata service IP (169.254.169.254) to prevent credential theft. - [NO_CODE]: The skill does not contain any executable scripts (e.g., Python, JavaScript, or shell scripts). It consists entirely of documentation and static YAML configuration templates.
- [COMMAND_EXECUTION]: troubleshooting sections in
SKILL.mdandreferences/rbac-patterns.mddescribe the use of standardkubectldiagnostic commands. These commands (e.g.,kubectl auth can-i) are used to verify permissions and are appropriate for the intended purpose of cluster security auditing.
Audit Metadata