agentsclimarketplace
Sign in

Pentest container k8s

Skill 0x-Professor/Agent-Skills-Hub/skills/pentest-container-k8s

Test Docker and Kubernetes security controls for RBAC abuse, breakout, and secret exposure.From its SKILL.md

Install
npx -y skills add 0x-Professor/Agent-Skills-Hub --skill pentest-container-k8s

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 10 stars10 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
  • runs commandsInstructs the agent to run 1 command, including `python skills/pentest-container-k8s/scripts/container_k8s.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run`.

SKILL.md

1.3 KB, 295 tokens by cl100k_base, as published. Nobody here has run it

Pentest Container K8s

Stage

  • PTES: 5-6
  • MITRE: T1610, T1611

Objective

Map container and cluster misconfigurations with exploit relevance.

Required Workflow

  1. Validate scope before any active action and reject out-of-scope targets.
  2. Run only authorized checks aligned to PTES, OWASP WSTG, NIST SP 800-115, and MITRE ATT&CK.
  3. Write findings in canonical finding_schema format with reproducible PoC notes.
  4. Honor dry-run mode and require explicit --i-have-authorization for live execution.
  5. Export deterministic artifacts for downstream skill consumption.

Execution

python skills/pentest-container-k8s/scripts/container_k8s.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run

Outputs

  • container-findings.json
  • k8s-rbac-risks.json
  • k8s-report.json

References

  • references/tools.md
  • skills/autonomous-pentester/shared/scope_schema.json
  • skills/autonomous-pentester/shared/finding_schema.json

Legal and Ethical Notice

WARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.

What ships with it: 4 files

4.5 KB alongside SKILL.md, 1 of them executable

agents/

assets/

references/

scripts/

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.