Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 31,792
pages available: 1,325

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 23,833–23,856 of 31,792 skills

Cis Gke V190 4.6.2AEnsure that the seccomp profile is set to RuntimeDefault in the pod definitions (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.6.1ACreate administrative boundaries between resources using namespaces (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.5.1AConfigure Image Provenance using ImagePolicyWebhook admission controller (Manual)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Gke V190 4.4.2AConsider external secret storage (Manual)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Gke V190 4.4.1APrefer using secrets as files over secrets as environment variables (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.3.2AEnsure that all Namespaces have Network Policies defined (Automated)securitygobashVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Cis Gke V190 4.3.1AEnsure that the CNI in use supports Network Policies (Manual)securityrustgoVotes: 0GitHub stars: 3,518
Cis Gke V190 4.2.1AEnsure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.9AAvoid non-default bindings to system:unauthenticated (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.8AAvoid bindings to system:anonymous (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.7ALimit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.6AAvoid use of system:masters group (Automated)securitygokubernetesVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory 6 slots · $699/mo · on every skill page · sponsors can never buy grades.See placements
Cis Gke V190 4.1.5AEnsure that Service Account Tokens are only mounted where necessary (Manual)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.4AEnsure that default service accounts are not actively used (Automated)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.3AMinimize wildcard use in Roles and ClusterRoles (Manual)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.2AMinimize access to secrets (Manual)securitygokubernetesVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.10AAvoid non-default bindings to system:authenticated (Automated)securitygobashVotes: 0GitHub stars: 3,518
Cis Gke V190 4.1.1AEnsure that the cluster-admin role is only used where required (Manual)securitygobashVotes: 0GitHub stars: 3,518
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Cis Gke V190 3.1.4AEnsure that the kubelet configuration file ownership is set to root:root (Automated)securitygoshellVotes: 0GitHub stars: 3,518
Cis Gke V190 3.1.3AEnsure that the kubelet configuration file has permissions set to 644 (Automated)securitygoshellVotes: 0GitHub stars: 3,518
Cis Gke V190 3.1.2AEnsure that the proxy kubeconfig file ownership is set to root:root (Automated)securitygoshellVotes: 0GitHub stars: 3,518
Cis Gke V190 3.1.1AEnsure that the proxy kubeconfig file permissions are set to 644 or more restrictive (Automated)securitygoshellVotes: 0GitHub stars: 3,518
Cis Gke V180 5.9.2AEnable Customer-Managed Encryption Keys (CMEK) for Boot Disks (Automated)securitygonodeVotes: 0GitHub stars: 3,518
Cis Gke V180 5.9.1AEnable Customer-Managed Encryption Keys (CMEK) for GKE Persistent Disks (PD) (Manual)securitygonodeVotes: 0GitHub stars: 3,518