Coreweave security basics

Skill ComeOnOliver/skillshub/skills/jeremylongshore/claude-code-plugins-plus-skills/coreweave-security-basics

🧠 The right skill, one API call. AI agent skills registry with token-efficient skill resolution. 5,000+ skills from 500+ top repos.

Install

npx -y skills add ComeOnOliver/skillshub --skill coreweave-security-basics

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Secure CoreWeave deployments with RBAC, network policies, and secrets management. Use when hardening GPU workloads, managing model access, or configuring namespace isolation. Trigger with phrases like "coreweave security", "coreweave rbac", "secure coreweave", "coreweave secrets".

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

1.8 KB, 324 tokens by cl100k_base, as published. Nobody here has run it

CoreWeave Security Basics

Instructions

Secrets for Model Access

# HuggingFace token
kubectl create secret generic hf-token --from-literal=token="${HF_TOKEN}"

# Container registry credentials
kubectl create secret docker-registry regcred \
  --docker-server=ghcr.io \
  --docker-username=$USER \
  --docker-password=$TOKEN

Network Policy for Inference Pods

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: inference-isolation
spec:
  podSelector:
    matchLabels:
      app: inference-server
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              role: api-gateway
      ports:
        - port: 8080
  egress:
    - to: []  # Allow all egress for model downloads
      ports:
        - port: 443

Security Checklist

Kubeconfig stored securely, not in repos
Secrets used for model tokens (not env vars in YAML)
Network policies restrict inference endpoint access
RBAC limits namespace access per team
Container images scanned for CVEs
PVCs encrypted at rest

Resources

CoreWeave CKS Security

Next Steps

For production readiness, see coreweave-prod-checklist.