Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 31,288
pages available: 1,304

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 22,945–22,968 of 31,288 skills

Cis K8s V200 1.1.16AEnsure that the scheduler.conf file ownership is set to root:root (Automated)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V200 1.1.15AEnsure that the scheduler.conf file permissions are set to 600 or more restrictive (Automated)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V200 1.1.14AEnsure that the default administrative credential file ownership is set to root:root (Automated)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V200 1.1.13AEnsure that the default administrative credential file permissions are set to 600 (Automated)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V200 1.1.12AEnsure that the etcd data directory ownership is set to etcd:etcd (Automated)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V200 1.1.11AEnsure that the etcd data directory permissions are set to 700 or more restrictive (Automated)securitygobashVotes: 0GitHub stars: 2,839
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Cis K8s V200 1.1.10AEnsure that the Container Network Interface file ownership is set to root:root (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V200 1.1.1AEnsure that the API server pod specification file permissions are set to 600 or more restrictive (Automated)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.6.4AThe default namespace should not be used (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.6.3AApply Security Context to Your Pods and Containers (Manual)securitygonodeVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.6.2AEnsure that the seccomp profile is set to docker/default in your pod definitions (Manual)securitygonodeVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.6.1ACreate administrative boundaries between resources using namespaces (Manual)securitygobashVotes: 0GitHub stars: 2,839
Skills DirectorySkills Directory 6 slots · $699/mo · on every skill page · sponsors can never buy grades.See placements
Cis K8s V1120 5.5.1AConfigure Image Provenance using ImagePolicyWebhook admission controller (Manual)securitygonodeVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.4.2AConsider external secret storage (Manual)securitygonodeVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.4.1APrefer using secrets as files over secrets as environment variables (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.3.2AEnsure that all Namespaces have Network Policies defined (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.3.1AEnsure that the CNI in use supports Network Policies (Manual)securitygonodeVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.2.9AMinimize the admission of containers with capabilities assigned (Manual)securityrustgoVotes: 0GitHub stars: 2,839
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Cis K8s V1120 5.2.8AMinimize the admission of containers with the NET_RAW capability (Manual)securityrustgoVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.2.7AMinimize the admission of root containers (Manual)securitygonodeVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.2.6AMinimize the admission of containers with allowPrivilegeEscalation (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.2.5AMinimize the admission of containers wishing to share the host network namespace (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.2.4AMinimize the admission of containers wishing to share the host IPC namespace (Manual)securitygobashVotes: 0GitHub stars: 2,839
Cis K8s V1120 5.2.3AMinimize the admission of containers wishing to share the host process ID namespace (Manual)securitygobashVotes: 0GitHub stars: 2,839