Skip to content
SkillCheatSheet Sign in

implementing-kubernetes-pod-security-standards

An AI agent skill from mukul975/Anthropic-Cybersecurity-Skills, scored 67 out of 100 by code.

67/ 100C

Code score by group

  • Spec20/20
  • Description17/20
  • Procedure7/15
  • Done criteria4/15
  • Resources8/10
  • Scripts3/8
  • Safety3/7
  • Upkeep5/5

It loses the most points in Done criteria (11), the group that checks whether there is a checklist and a step that verifies the work.

What the author says it does

Chooses and applies the correct Kubernetes Pod Security Standard (Privileged, Baseline, Restricted) for a workload: what each profile forbids, how to map existing workloads to a profile, which securityContext fields must change, and how to plan a PodSecurityPolicy-to-PSS migration without breaking running pods. Use when deciding which pod security profile a namespace or workload should run under, auditing which workloads would fail Restricted, planning a PSP migration, or mapping pod security posture to a compliance control. Keywords: Pod Security Standards, PSS, Privileged, Baseline, Restric…

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
mukul975/Anthropic-Cybersecurity-Skills
Folder
skills/implementing-kubernetes-pod-security-standards
License
Apache-2.0
GitHub stars
35,958
SKILL.md lines
283
Other files
7

Add implementing-kubernetes-pod-security-standards to your agent

npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-kubernetes-pod-security-standards

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

More skills from mukul975/Anthropic-Cybersecurity-Skills

  1. exploiting-adcs-with-certipy

    Use Certipy to enumerate AD CS certificate authorities and templates over LDAP/RPC, then exploit ESC1-ESC16 misconfigurations - SAN abuse, NTLM relay to web enrollment (ESC8), Sha…

    Verified84B
  2. auditing-tls-certificate-transparency-logs

    Monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance, discover subdomains via CT data, and alert on suspicious certificate activity for owned do…

    Verified82B
  3. conducting-api-security-testing

    Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The te…

    Verified82B
  4. conducting-gdpr-compliance-assessment

    Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis…

    Verified82B
  5. detecting-container-runtime-threats-with-falco

    Deploys and operates Falco with the modern eBPF driver in Kubernetes and Docker, covering driver selection, Helm installation, output channels, and the built-in ruleset that detec…

    Verified82B
  6. detecting-typosquatting-packages

    Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation, using edit-distance, keyboard-proximity, and known-target corpus…

    Verified82B
  7. performing-access-review-and-certification

    Designs and runs access review and certification campaigns-scoping, reviewer selection, risk-based prioritization, micro-certification, and remediation tracking-to verify user acc…

    Verified82B
  8. assessing-vector-and-embedding-weaknesses

    Test RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector, FAISS) for embedding inversion, cross-tenant data leakage, and data poisoning per OWASP LLM08:2025. Use when…

    Verified81B

All skills in mukul975/Anthropic-Cybersecurity-Skills

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.