Harden a Kubernetes cluster's data plane and control plane. Covers Pod Security Standards (Restricted, Baseline, Privileged), RBAC with least privilege, NetworkPolicy default-deny, secrets management without raw env vars, admission controllers (Kyverno, OPA Gatekeeper), image scanning, and audit logging. Invoke when provisioning a new cluster, inheriting one, or before adding a new tenant to a shared cluster.
$npx -y skills add goldenwing-360/claude-security-skills --skill kubernetes-securityInstalls into the current project.
Run `npx skills use "https://github.com/goldenwing-360/claude-security-skills" --skill "goldenwing-360/claude-security-skills/kubernetes-security"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/goldenwing-360/claude-security-skills" that are relevant to the current task. Run `npx skills add "https://github.com/goldenwing-360/claude-security-skills"` and select the relevant skills, then follow their instructions.