Skip to content
Get packs

Cloud and Kubernetes Security Assessment

Guides an agent through authorized cloud, container and Kubernetes security reviews

Source Download skill
Repository
zhaoxuya520/reverse-skill
Stars
43,969
Licence
MIT
Files
2 files

What it does

Once installed, the agent follows a structured checklist for security testing of cloud accounts, containers and Kubernetes clusters. It works through identity and scope first, then cloud configuration (public storage, metadata service exposure, IAM permissions), container risks (privileged settings, host mounts, capabilities), and Kubernetes RBAC, secrets and network policy. It is written to be used only against systems you are explicitly authorized to test, and it asks the agent to avoid destructive actions and broad network scanning.

Great for

  • Security engineers performing an authorized review of their own cloud or Kubernetes environment
  • Penetration testers with written scope who need a cloud and container checklist
  • Platform teams auditing RBAC, service account tokens and container privilege settings

Skip it if

  • Testing cloud accounts, clusters or tenants you do not own or have written permission to assess, which is illegal and is explicitly prohibited by the skill
  • General web application scanning, which the skill itself routes to a different tool set
  • Beginners without security background, since the output can describe exploitable paths that require expert judgment to handle safely

Try asking

  • “Review my AWS account for public S3 buckets and IMDSv1 exposure, within the account I have written authorization for”
  • “Run an RBAC review of my staging Kubernetes cluster and list over-privileged service accounts”
  • “Check my container images and pod specs for privileged mode, hostPath mounts and dangerous capabilities”
Step-by-step guide: how to use Cloud and Kubernetes Security AssessmentInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    cloud-k8s.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip cloud-k8s.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip cloud-k8s.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Provide a written scope statement naming the exact account, cluster and namespaces before starting, since the skill asks for this first
  • Ask the agent to start with identity and exposure only, then expand, to keep the assessment narrow
  • Review every command the agent proposes before running it, especially cloud CLI calls that touch live resources

What's inside

  • references/k8s-cloud-checklist.md
  • SKILL.md

Redistributed unmodified from zhaoxuya520/reverse-skill under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.