skills/wgpsec/aboutsecurity/k8s-istio-bypass/Socket

k8s-istio-bypass

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

该技能不是普通 Istio 运维指南，而是专门帮助 AI 代理规避 K8s/Istio 安全控制的攻击型技能。其核心能力包括 UID 1337 策略绕过、Envoy 管理接口枚举、证书/secret 读取、第三方侦察工具和 transitive skill 扩展，整体与合法最小权限工作流不相称，应归为高风险、可疑且接近恶意的利用技能。

Confidence: 94%Severity: 93%

Audit Metadata

Analyzed At

Sep 23, 2026, 04:25 AM

Package URL

pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fk8s-istio-bypass%2F@9555fb6f3121bdb14bea738aa316e907e76e49eaada72717ffc30223525a5eab