Kubernetes Skills

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: 895a0cbc0bfb179f6232a16109e21163a6d7a06baf872c99d5dedcf39c32844a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to its broad and high-risk capabilities, despite lacking explicit instructions for malicious intent. It provides tools like `get_secrets()`, `capi_cluster_kubeconfig_tool()`, and `apply_manifest()` across multiple Kubernetes clusters, as detailed in `SKILL.md` and `CONTEXT-SWITCHING.md`. These functions allow the agent to read sensitive data (secrets, kubeconfigs) and apply arbitrary manifests, which could be leveraged by a malicious user for data exfiltration, privilege escalation, or deploying backdoors, even though the skill itself does not instruct such actions.