k8s-webhook-abuse

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. It is internally consistent with its stated purpose, but that purpose is to abuse Kubernetes admission webhooks and exfiltrate secrets/policy data from internal services. No strong malware or obfuscation signals, but the exploit guidance and explicit data-extraction flow make it dangerous.

Confidence: 95%Severity: 93%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:27 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fk8s-webhook-abuse%2F@60d2d45bef65236d621b26400931a8b00dd6f39085af2656b46b4b3b481c0ea9