Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add zhaoxuya520/reverse-skill/skills/cloud-k8sCompatible with
Supported agents
| name | cloud-k8s |
| description | Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, container escape paths, and cluster RBAC review. |
NOW: 读取 ../field-journal/precedent-pentest.md — 云/K8s 测试必须书面授权NOW: case-init + scope；明确账号边界、禁止破坏性操作NOW: 确认是云元数据/容器/K8s/IAM，而非普通 Web 扫（后者 pentest-tools/）NEXT: tool-index；kubectl/aws/gcloud 等多为手动安装ACT: 从「身份与暴露面」开始，禁止默认全网扫描supply-chain-security/）□ 当前身份：云 AK/SK、K8s SA、节点 SSH？
□ 范围：单账号 / 单 cluster / 单 namespace
□ 网络档：authorized_target_only
# 示例（按厂商替换；MUST 在授权账号内）
aws sts get-caller-identity
aws s3 ls
# Azure / GCP 对应 identity 命令
□ 公开桶 / 错误 ACL
□ 元数据：IMDSv1 vs v2；SSRF 链
□ 角色可扮演（PassRole）与横向
□ 是否 privileged / hostPath / hostNetwork
□ capabilities（SYS_ADMIN 等）
□ 可写宿主机路径 → 逃逸候选
□ 镜像历史与已知 CVE → Trivy
kubectl auth can-i --list
kubectl get pods,secrets,svc -A
kubectl get clusterrolebindings
□ SA token 挂载与权限
□ 危险 admission webhook 缺失
□ etcd / dashboard 暴露
□ 网络策略是否默认放行
| 工具 | 用途 | 自举 |
|---|---|---|
| kubectl | 集群交互 | 手动 |
| trivy | 镜像/IaC | bootstrap trivy 若可用 |
| kube-bench / kubeaudit | CIS/配置 | 手动 |
| pacu / scoutsuite | 云审计（授权） | 手动 |
| nuclei | 已知云漏洞模板 | bootstrap nmap/nuclei 生态 |
references/k8s-cloud-checklist.md../../CTF-Sandbox-Orchestrator/competition-agent-cloud/../supply-chain-security/ ../pentest-tools/上游: MASTER R23
下游: 拿到节点 shell → attack-chain / windows-ad；镜像漏洞 → supply-chain
MUST NOT: 未授权扫公有云其他租户
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versioncloud-k8sExecute the skills CLI command in your project's root directory to begin installation:
epx add zhaoxuya520/reverse-skill/skills/cloud-k8sFetches cloud-k8s from zhaoxuya520/reverse-skill and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/cloud-k8s
Restart Cursor to activate cloud-k8s. Access via /cloud-k8sin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
apk-reverse
zhaoxuya520/reverse-skill · security · same repo
dotnet-reverse
zhaoxuya520/reverse-skill · security · same repo
ida-reverse
zhaoxuya520/reverse-skill · security · same repo
api-security
zhaoxuya520/reverse-skill · security · same repo
radare2
zhaoxuya520/reverse-skill · security · same repo
identity-federation
zhaoxuya520/reverse-skill · security · same repo
cloud-k8s has been reliable in day-to-day use. Documentation quality is above average for community skills.
cloud-k8s fits our agent workflows well — practical, well scoped, and easy to wire into existing repos.
cloud-k8s fits our agent workflows well — practical, well scoped, and easy to wire into existing repos.
Registry listing for cloud-k8s matched our evaluation — installs cleanly and behaves as described in the markdown.
We added cloud-k8s from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
We added cloud-k8s from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
cloud-k8s reduced setup friction for our internal harness; good balance of opinion and flexibility.
I recommend cloud-k8s for anyone iterating fast on agent tooling; clear intent and a small, reviewable surface area.
Solid pick for teams standardizing on skills: cloud-k8s is focused, and the summary matches what you get after install.
Solid pick for teams standardizing on skills: cloud-k8s is focused, and the summary matches what you get after install.
showing 1-10 of 53