k8s-ingress-nightmare

Warn

Audited by Socket on Oct 11, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
SKILL.md

SUSPICIOUS/HIGH-RISK skill. Its footprint is dominated by offensive exploitation: target discovery, unauthenticated RCE, shell access, token theft from the compromised pod, and lateral movement guidance. The install story is mixed: kubectl/nmap are standard, but the core PoC is a third-party binary and an internal f8x path is not transparent. This is not confirmed malware, but it is a high-risk exploit skill that equips an AI agent for real offensive actions against Kubernetes clusters.

Confidence: 93%Severity: 88%
AnomalyLOW
evals/evals.json

The fragment is a static benchmark/evaluation dataset containing explicit guidance for exploiting an ingress-nginx vulnerability and achieving RCE. It does not itself perform malicious actions or contain executable malware, but its embedded expected outputs are operationally dangerous exploit content and should be handled as sensitive dual-use material.

Confidence: 99%Severity: 58%
Audit Metadata
Analyzed At
Oct 11, 2026, 09:54 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fk8s-ingress-nightmare%2F@d80c543f36454d5866600d85d30e4c26a5445bfe54fbe539209e6d34916c6e1e