k8s-storage-exploit
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to search for and extract highly sensitive credentials and secrets, including host shadow files (
/etc/shadow), SSH private keys (~/.ssh/), and various cryptographic certificates (*.pem,*.key). - [DATA_EXFILTRATION]: It describes how to set up SSH remote port forwarding (
ssh -R) to create a tunnel between internal network resources (like NFS servers) and an external attacker-controlled IP address, facilitating the exfiltration of data from restricted environments. - [PRIVILEGE_ESCALATION]: The instructions demonstrate how to bypass standard file access controls by spoofing user and group identifiers (
uid=0&gid=0) when accessing NFS shares via specialized tools. It also targetshostPathmounts to escape container boundaries and access host-level system files. - [COMMAND_EXECUTION]: The skill provides a series of commands designed to discover and interact with remote storage backends, including
mountmanipulation,nfs-catfor direct network access, and broad filesystem searches for sensitive data.
Recommendations
- AI detected serious security threats
Audit Metadata