Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 31,788
pages available: 1,325

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 22,921–22,944 of 31,788 skills

Cis Ocp V160 1.1.16AEnsure that the Scheduler kubeconfig file ownership is set to root:root (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V160 1.1.15AEnsure that the Scheduler kubeconfig file permissions are set to 600 or more restrictive (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V160 1.1.14AEnsure that the kubeconfig file ownership is set to root:root (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V160 1.1.13AEnsure that the kubeconfig file permissions are set to 600 or more restrictive (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V160 1.1.12AEnsure that the etcd data directory ownership is set to etcd:etcd (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V160 1.1.11AEnsure that the etcd data directory permissions are set to 700 or more restrictive (Manual)securitygobashVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Cis Ocp V160 1.1.10AEnsure that the Container Network Interface file ownership is set to root:root (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V160 1.1.1AEnsure that the API server pod specification file permissions are set to 600 or more restrictive (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 5.2.1AMinimize admission of privileged containers (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 5.1.6AEnsure Service Account Tokens only mounted where necessary (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 5.1.5AEnsure default service accounts not actively used (Manual)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Ocp V170 5.1.4AMinimize access to create pods (Manual)securitygobashVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory 6 slots · $699/mo · on every skill page · sponsors can never buy grades.See placements
Cis Ocp V170 5.1.3AMinimize wildcard use in Roles and ClusterRoles (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 5.1.2AMinimize access to secrets (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 5.1.1AEnsure cluster-admin role only used where required (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.9AEnsure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)securityrustgoVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.8AEnsure that the kubeAPIQPS [--event-qps] argument is set to 0 or a level which ensures appropriate event capture (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.7AEnsure that the --make-iptables-util-chains argument is set to true (Manual)securitygobashVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Cis Ocp V170 4.2.6AEnsure that the --streaming-connection-idle-timeout argument is not set to 0 (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.5AVerify that the read only port is not used or is set to 0 (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.4AEnsure that the --client-ca-file argument is set as appropriate (Automated)securityrustgoVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.3AEnsure that the --authorization-mode argument is not set to AlwaysAllow (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.2AEnsure that the --anonymous-auth argument is set to false (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Ocp V170 4.2.12AEnsure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)securitygobashVotes: 0GitHub stars: 3,518