What problem does it solve? Security testers often guess commands when auditing cloud accounts, containers, or Kubernetes clusters. This Skill provides a structured, repeatable workflow for authorized assessments, covering identity boundaries, cloud control planes, container escape paths, and cluster RBAC review. ## Core Features & Use Cases - Phased Assessment Workflow: Walks through identity and scope definition, cloud control plane checks (IMDS, public buckets, IAM roles), container hardening review (privileged mode, capabilities, host mounts), and Kubernetes auditing (RBAC, secrets, admission webhooks). - Toolchain Guidance: Maps tasks to tools such as kubectl, trivy, kube-bench, kubeaudit, pacu, scoutsuite, and nuclei, with notes on which require manual installation. - Use Case: During an authorized engagement, use it to enumerate a cluster with kubectl auth can-i --list, review clusterrolebindings, check for privileged pods with hostPath mounts, and document findings with reproduction steps. ## Quick Start Ask the agent to run an authorized Kubernetes security review of my cluster, starting with RBAC permissions and privileged container checks.
