kube-audit-kit

Community

End-to-end, read-only Kubernetes security audits.

AuthorViniciusMarsili
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Kubernetes security audits are often complex and manual, requiring you to export all resources, clean sensitive metadata, group resources by workload, and generate comprehensive reports. This Skill automates the entire, read-only audit workflow end-to-end, reducing risk and effort.

Core Features & Use Cases

  • Read-only export of all namespaced resources using kubectl get/list
  • Metadata sanitization to remove sensitive information
  • Intelligent grouping of resources into applications based on workload topology
  • Dual-phase audit: script-based checks plus AI-assisted deep review
  • Outputs a comprehensive audit report and structured artifacts per context/namespace
  • Works across contexts and namespaces for security reviews and compliance checks

Quick Start

Set the output directory to a local folder:

  • export KUBE_AUDIT_OUTPUT="$(pwd)/output" Run the four steps in order:
  • uv run python scripts/export.py --context <ctx> --namespace <ns>
  • uv run python scripts/sanitize.py --context <ctx> --namespace <ns>
  • uv run python scripts/group_apps.py --context <ctx> --namespace <ns>
  • uv run python scripts/audit.py --context <ctx> --namespace <ns> View the final report:
  • cat output/<ctx>/<ns>/audit/audit_report.md

Dependency Matrix

Required Modules

pyyamlrich

Components

scripts

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: kube-audit-kit
Download link: https://github.com/ViniciusMarsili/kube-audit-kit/archive/main.zip#kube-audit-kit

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.