A Secret manifest in git is only base64, and a single privileged container can take over its node. This skill finds those and nine other risky settings in your Kubernetes manifests, and tells you how to fix each one.

Your agent runs a scanner on your YAML manifests: Deployments, StatefulSets, DaemonSets, Jobs, CronJobs, Pods, Services and Secrets, including init containers, kind: List files and multi-document files. It returns BLOCK, REVIEW, or NOT FLAGGED, with the file, line, reason, and a safer approach. Secret values are never printed.

What it checks

BLOCK (fix before shipping)

• K01: a privileged container

• K02: a password, token or key written as a plain env value

• K03: a Secret manifest with real data or stringData values

• K04: a hostPath mount of the container runtime socket or the node root

REVIEW (check before release)

• K11: an image with no tag or :latest

• K12: hostNetwork, hostPID or hostIPC

• K13: a container that may run as root

• K14: dangerous capabilities such as SYS_ADMIN or ALL

• K15: a hostPath mount of a node system folder

• K16: no memory limit

• K17: a database port exposed through LoadBalancer or NodePort

What's included

• The scanner (Python 3.9+, standard library only)

• A rules guide with the reason and safer approach for each rule

• A risky and a safe example manifest, and the real report the scanner produces on the risky one

Limits

It reads YAML text. It does not render Helm templates or Kustomize overlays, and it cannot see admission policies or what is running in the cluster. NOT FLAGGED is not a guarantee.

Contents

One ZIP file with 8 files: SKILL.md, the scanner in scripts/ (3 Python files), references/rules.md (every rule with its reason and safer approach), and examples/ (2 example files plus report.md, the real scanner output on the risky example).

How to use: This is an agent skill: a folder with a SKILL.md file and Python scripts that an AI coding agent such as Claude Code, Cursor, or Codex CLI can run. Unzip it into your agent's skills folder (for Claude Code: ~/.claude/skills/), then ask your agent to check your project. The scripts also run on their own with Python 3.9 or newer, with nothing to install. They read your files only: no network access, and nothing is sent anywhere.