Individual skill
container-security
Container and Kubernetes security assessment — image vulnerability scanning, SBOM diff analysis, K8s cluster auditing, RBAC privilege mapping, NetworkPolicy review, container escape testing, and runtime monitoring (Falco/Tetragon). Use when scanning Docker/OCI images, auditing K8s clusters, reviewing Dockerfiles, diffing SBOMs across releases, analyzing RBAC, or assessing container runtime posture. Triggers on requests involving Trivy, Grype, Syft, Kubescape, kube-bench, Falco, container escapes, or CIS Docker/K8s benchmarks.
skills/container-security/SKILL.md
Source commit a1a68f7010a9c97b22336dcbcfde539c492a7109
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 109
- Repository last updated
- Apr 19, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- devops Derived category
- security Derived category
- testing Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 11,031 bytesSKILL.mdcore · 11,031 bytesexamples/falco_custom_rule.yamlasset · 3,600 bytesexamples/vulnerable_dockerfile.mddoc · 3,536 bytespayloads/container_escape_poc.mddoc · 7,857 bytesreferences/bounty_patterns_2024_2026.mddoc · 8,739 bytesreferences/container_escape.mddoc · 5,418 bytesreferences/image_scanning.mddoc · 3,885 bytesreferences/kubernetes_hardening.mddoc · 5,296 bytesreferences/runtime_security.mddoc · 4,384 bytesschemas/finding.jsonasset · 3,203 bytestemplates/assessment_report_template.mddoc · 2,091 bytesworkflows/cluster_audit.mddoc · 2,667 bytesworkflows/image_scan.mddoc · 2,056 bytesworkflows/network_policy_review.mddoc · 2,280 bytesworkflows/rbac_analysis.mddoc · 2,671 bytesworkflows/sbom_diff.mddoc · 4,289 bytes
No licensed excerpt is available. You can inspect the pinned source.