auditing-kubernetes-rbac-privilege-escalation

Editorial and source context

What this Skill does

Auditing Kubernetes Rbac Privilege Escalation is a source-indexed Agent Skill for security, quality & compliance work. Based on the SKILL.md description, it focuses on finds over-permissive rbac roles and service-account token abuse paths in a kubernetes cluster using…. Use the linked GitHub file to confirm scope and prerequisites before enabling it.

What the author says

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can escalate toward cluster-admin. Use when reviewing who can escalate privileges in a cluster, hunting exploitable RoleBindings during an authorized review, or validating least privilege after an RBAC change. Keywords: RBAC, ClusterRoleBinding, service account token, auth can-i, rbac-police, escalate, bind, impersonate. Do not use for designing and applying hardened RBAC - use implementing-rbac-hardening-for-kubernetes.

Compatibility and requirements

• Use an agent runtime that supports Agent Skills and the linked SKILL.md format.
• Confirm the source repository's tools, SDKs, and platform prerequisites for cloud deployment work.

How to install or import it

• Open the linked GitHub SKILL.md and review its scope and setup instructions.
• Install or import the skill using the agent runtime's documented workflow.
• Run a small, non-sensitive test and verify the output before broader use.

Permissions and risks

• Review every command, file path, network request, dependency, and credential scope before enabling it.
• GitHub stars indicate popularity, not safety or correctness; validate the source and test with non-sensitive data.

Example workflows

• Ask an AI agent to apply Auditing Kubernetes Rbac Privilege Escalation to cloud deployment work described in the source record.
• Have the agent state assumptions, required tools, and expected output before using this security, quality & compliance skill.
• Compare the result with the linked GitHub SKILL.md and verify it against your project requirements.