Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add kudig-io/kudig-database --skill k8s-security-incidentgit clone --depth 1 https://github.com/kudig-io/kudig-databaseWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kudig-io/kudig-database/k8s-security-incident)<a href="https://agentmods.dev/skills/kudig-io/kudig-database/k8s-security-incident"><img src="https://agentmods.dev/badge/skills/kudig-io/kudig-database/k8s-security-incident/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kudig-io/kudig-database/k8s-security-incident"><img src="https://agentmods.dev/badge/skills/kudig-io/kudig-database/k8s-security-incident.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00016 | $0.04411 |
| Opus 5.5 | $0.00006 | $0.01764 |
| Sonnet 5.5 | $0.00003 | $0.00882 |
| Haiku 4.5 | $0.00002 | $0.00441 |
Grade A, and why
k8s-security-incident scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 358 lines — stays where its author put it; the contents beside it link to each section on GitHub.
生产环境安全提示
本文档包含可直接执行的运维命令。执行前请确认：当前目标集群与 Namespace 是否正确；是否具备足够的 RBAC 权限；是否已在非生产环境验证。命令风险等级标注：🔴 高风险（可能造成数据丢失或服务中断）、🟡 中风险（会修改集群状态，但通常可回滚）、🟢 低风险/只读（信息收集，无副作用）。
K8s Security Incident Response 诊断与响应
[[kubernetes|Kubernetes]] 安全事件可能涉及容器逃逸、权限提升、恶意镜像、未授权访问等。正确的响应流程对于控制影响范围、保留证据、满足合规要求至关重要。
本 Skill 提供安全事件的识别、遏制、根除、恢复和总结的全流程指导。
何时使用此 Skill
| 症状 | 检测方法 | 置信度 |
|---|---|---|
| 异常容器进程 | [[falco|Falco]]/运行时检测 | 0.90 |
| 未授权 API 访问 | Audit Logs | 0.95 |
| 特权容器创建 | Admission Logs | 0.95 |
| 可疑网络连接 | Network Flow Logs | 0.85 |
| 已知 CVE 被利用 | Vulnerability Scanner | 0.90 |
| 异常镜像拉取 | Registry Audit | 0.85 |
快速分级（2 分钟内完成）
严重性
├── 确认的数据泄露 ──────────────→ P0-CRITICAL（立即响应）
├── 确认的容器逃逸 ──────────────→ P0-CRITICAL（立即响应）
├── 可疑的权限提升尝试 ──────────→ P1（30min 内响应）
├── 异常网络行为 ────────────────→ P1（30min 内响应）
└── 漏洞扫描告警（未确认利用） ──→ P2（2h 内处理）
立即升级条件:
- 任何确认的安全入侵
- 数据泄露疑似发生
- 核心基础设施被攻破
执行流程
安全告警触发
│
▼
┌──────────────┐ 脚本: scripts/diagnose-quick.sh
│ Phase 1 │ 内容: 只读审计检查（只读，零风险）
│ 识别确认 │ Step: D1.1-D1.5
└──────┬───────┘
│ 确认安全事件
▼
┌──────────────┐ 参考: reference/remediation-playbook.md
│ 遏制 │ 风险: HIGH → CRITICAL
│ 人工执行 │ 所有操作需安全团队审批
└──────┬───────┘
│
▼
┌──────────────┐ 脚本: scripts/verify-security.sh
│ 恢复验证 │ 检查: 审计/权限/网络
└──────────────┘
可用脚本
| 脚本 | 用途 | 参数 | 风险 |
|---|---|---|---|
scripts/diagnose-quick.sh |
安全事件快速审计 | NAMESPACE (optional) |
只读 |
scripts/verify-security.sh |
修复后验证 | NAMESPACE (optional) |
只读 |
注意: 所有脚本仅执行只读操作，不会修改任何资源。
根因概览 (5 种)
| RC ID | 根因 | 概率 | 首选响应 | 风险 |
|---|---|---|---|---|
| RC-001 | 容器逃逸 | 中 | 隔离节点 + 取证 | CRITICAL |
| RC-002 | 权限提升（RBAC 滥用） | 中 | 撤销权限 + 审计 | HIGH |
| RC-003 | 恶意镜像/供应链攻击 | 中 | 阻断镜像 + 扫描 | HIGH |
| RC-004 | 未授权 API 访问 | 高 | 吊销凭证 + 审计 | HIGH |
| RC-005 | 内部威胁/配置漂移 | 低 | 回滚配置 + 审查 | HIGH |
关联资源
| 资源 | 路径 |
|---|---|
| 修复操作手册 | reference/remediation-playbook.md |
| 单文件完整版 | ../18-security-incident-response.md |
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +19 lines 09c6b2202f18
- 1mo ago First seen · 339 lines · 16 tokens per session scan A 9c586f92a203
k8s-security-incident is a skill published in the GitHub repository kudig-io/kudig-database (6 stars, last pushed yesterday), licensed Apache-2.0. It adds 16 tokens to every session and 4,411 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
analyzing-docker-container-forensics
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
dsh-k8s-diagnosis
Diagnose live Kubernetes failures (CrashLoopBackOff, OOMKilled, NodeNotReady, ImagePullBackOff, Network/CNI failures, HPA starvation, DNS failures, pending pods) with an evidence-first procedure: capture context, collect signals (events/status/logs), rank falsifiable hypotheses, verify one variable at a time, fix with…
forensic-data-engineer
Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation.
kube-medic
Kubernetes Cluster Triage & Diagnostics — instant AI-powered incident triage via kubectl.
k8s-aiops
Use this skill whenever the user needs to operate a Kubernetes cluster — list/inspect pods, deployments, statefulsets, daemonsets, replicasets, jobs, cronjobs, services, ingresses, endpoints, configmaps, secrets (names/keys only), PVCs/PVs/storageclasses, nodes, namespaces, and events; read pod logs; describe…
build-mcpb
This skill should be used when the user wants to "package an MCP server", "bundle an MCP", "make an MCPB", "ship a local MCP server", "distribute a local MCP", discusses ".mcpb files", mentions bundling a Node or Python runtime with their MCP server, or needs an MCP server that interacts with the local filesystem…