Task
SkillCloud & infraReviews Kubernetes Gateway API configs (Gateway, HTTPRoute, etc.) for security risks.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Task skill
What this skill tells your AI
The instructions your AI receives, as published by gke-labs/kube-agents in .agents/skills/review-security-k8s-gateway/SKILL.md and read by ahel’s review.
Review Kubernetes Gateway API configurations (Gateway, HTTPRoute, TCPRoute, TLSRoute, ReferenceGrant) for vulnerabilities.
Checks
- Route Hijacking: Flag overlapping hostnames/paths in routes that allow hijacking critical traffic.
- Cross-Namespace: Flag routing or secret references across namespaces without narrow
ReferenceGrant. - Listeners & TLS: Verify TLS
mode(Terminate/Passthrough) and secure certificate references. - Allowed Routes: Require
allowedRoutesto restrict attachment by namespace (e.g.,namespaces.from: SameorSelector). - Permissive Hostnames: Flag unnecessary wildcards (
*) or overly broad hostnames in listeners/routes.
Signals
- GitHub stars
- 54
- Forks
- 36
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
review-security-k8s-gateway- Source
- github.com/gke-labs/kube-agents