Kubernetes RBAC Audit

• Outcome: Pass
• Latest audit: May 26, 2026, 9:45 AM
• Version:
  1.0.0

Overview

This is a coherent Kubernetes RBAC audit skill, but users should run it with a dedicated read-only cluster context and protect the generated reports.

Install only if you intend to audit a Kubernetes cluster. Use a dedicated read-only kubeconfig/context instead of cluster-admin where possible, avoid running it from a privileged in-cluster service account, and store any generated RBAC reports as sensitive security documents.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: Requesting cluster-admin or equivalent broad read access for an audit workflow materially increases exposure of sensitive cluster-wide information, including RBAC mappings, service accounts, and potential secret-access paths, without a clear warning or minimization guidance. In a real environment, operators may overgrant permissions to run the skill, creating unnecessary blast radius if the workstation, plugin chain, or output artifacts are compromised.

VirusTotal

66/66 vendors flagged this skill as clean.