kube-audit-kit
CommunityEnd-to-end, read-only Kubernetes security audits.
Software Engineering#automation#kubernetes#auditing#kubectl#read-only#security-audit#ai-deep-analysis
AuthorViniciusMarsili
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Kubernetes security audits are often complex and manual, requiring you to export all resources, clean sensitive metadata, group resources by workload, and generate comprehensive reports. This Skill automates the entire, read-only audit workflow end-to-end, reducing risk and effort.
Core Features & Use Cases
- Read-only export of all namespaced resources using kubectl get/list
- Metadata sanitization to remove sensitive information
- Intelligent grouping of resources into applications based on workload topology
- Dual-phase audit: script-based checks plus AI-assisted deep review
- Outputs a comprehensive audit report and structured artifacts per context/namespace
- Works across contexts and namespaces for security reviews and compliance checks
Quick Start
Set the output directory to a local folder:
- export KUBE_AUDIT_OUTPUT="$(pwd)/output" Run the four steps in order:
- uv run python scripts/export.py --context <ctx> --namespace <ns>
- uv run python scripts/sanitize.py --context <ctx> --namespace <ns>
- uv run python scripts/group_apps.py --context <ctx> --namespace <ns>
- uv run python scripts/audit.py --context <ctx> --namespace <ns> View the final report:
- cat output/<ctx>/<ns>/audit/audit_report.md
Dependency Matrix
Required Modules
pyyamlrich
Components
scripts
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: kube-audit-kit Download link: https://github.com/ViniciusMarsili/kube-audit-kit/archive/main.zip#kube-audit-kit Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.