Task
SkillCloud & infraReviews AI agent Kubernetes configurations for credentials exposed to agents.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Task skill
What this skill tells your AI
The instructions your AI receives, as published by gke-labs/kube-agents in .agents/skills/review-security-k8s-agents-credentials/SKILL.md and read by ahel’s review.
Review K8s configurations tailored to unique AI agent risks (prompt injection, RCE, credential exfiltration).
Checks
1. Zero-Trust Key Management
- Credential Proxy: All authenticated outbound requests MUST route through a dedicated injecting proxy/sidecar. Flag agent containers with direct access to Secrets.
- No Direct Mounts/EnvVars: Main agent container MUST NOT use
env,envFrom, or volume mounts for secrets. - No Hardcoded Credentials: Flag any plaintext keys/passwords in manifests.
2. Least Privilege
- No Auto-mounting: Require
automountServiceAccountToken: false. If API access is required, mount token ONLY in the sidecar proxy. - Dedicated Accounts: Require dedicated
serviceAccountName. Flagdefault. - Granular RBAC: Ensure strict scoping. Flag wildcards (
*) inverbsorresources.
Signals
- GitHub stars
- 54
- Forks
- 36
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
review-security-k8s-agents-credentials- Source
- github.com/gke-labs/kube-agents