k8s-ingress-nightmare
Audited by Socket on Oct 11, 2026
2 alerts found:
SecurityAnomalySUSPICIOUS/HIGH-RISK skill. Its footprint is dominated by offensive exploitation: target discovery, unauthenticated RCE, shell access, token theft from the compromised pod, and lateral movement guidance. The install story is mixed: kubectl/nmap are standard, but the core PoC is a third-party binary and an internal f8x path is not transparent. This is not confirmed malware, but it is a high-risk exploit skill that equips an AI agent for real offensive actions against Kubernetes clusters.
The fragment is a static benchmark/evaluation dataset containing explicit guidance for exploiting an ingress-nginx vulnerability and achieving RCE. It does not itself perform malicious actions or contain executable malware, but its embedded expected outputs are operationally dangerous exploit content and should be handled as sensitive dual-use material.