Skip to content
Agentmart
Submit a tool

pentest-container-k8s

Test Docker and Kubernetes security controls for RBAC abuse, breakout, and secret exposure.

Skill by 0x-Professor

IndexedApache-2.0★ 11
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/0x-professor-pentest-container-k8s

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Test Docker and Kubernetes security controls for RBAC abuse, breakout, and secret exposure.

Use cases: testing, devops, security

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found
Runs as
Python package

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/pentest-container-k8s

What's inside

Skill name
pentest-container-k8s
Description
Test Docker and Kubernetes security controls for RBAC abuse, breakout, and secret exposure.
License
Apache-2.0
Instructions
47 lines in SKILL.md · view on GitHub

Before installing

  • Ships executable scripts

Files (5)

  • SKILL.md
  • openai.yaml · agents/
  • .gitkeep · assets/
  • tools.md · references/
  • container_k8s.py · scripts/

SKILL.md (first lines)

# Pentest Container K8s

## Stage

- PTES: 5-6
- MITRE: T1610, T1611

## Objective

Map container and cluster misconfigurations with exploit relevance.

## Required Workflow

1. Validate scope before any active action and reject out-of-scope targets.
2. Run only authorized checks aligned to PTES, OWASP WSTG, NIST SP 800-115, and MITRE ATT&CK.
3. Write findings in canonical finding_schema format with reproducible PoC notes.
4. Honor dry-run mode and require explicit --i-have-authorization for live execution.
5. Export deterministic artifacts for downstream skill consumption.

## Execution

```bash
python skills/pentest-container-k8s/scripts/container_k8s.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-run
```

## Outputs

- `container-findings.json`
- `k8s-rbac-risks.json`
- `k8s-report.json`

## References

- `references/tools.md`
- `skills/autonomous-pentester/shared/scope_schema.json`
- `skills/autonomous-pentester/shared/finding_schema.json`

## Legal and Ethical Notice

```text
WARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.

```

From 0x-Professor/Agent-Skills-Hub, Apache-2.0.

More from 0x-Professor/Agent-Skills-Hub

Signals

Stars
11
Forks
2
Open issues
0
Last commit (this folder)
Feb 26, 2026 (8 months ago)
Last release
Feb 26, 2026 (8 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License
Apache-2.0
Repository
github.com/0x-Professor/Agent-Skills-Hub
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
GitHubgithub-graphql

More from 0x-Professor

Cite this page

pentest-container-k8s skill. Agent Mart. https://agentmart.dev/skills/0x-professor-pentest-container-k8s (last updated 2026-10-24)