MCP App StoreMCP App Store
from cybersecurity-skills-zh18
Implement Pod-level network segmentation in Kubernetes to enforce least-privilege communication and prevent lateral movement.
This skill provides a comprehensive framework for securing Kubernetes clusters using NetworkPolicies. It focuses on implementing zero-trust networking by controlling Ingress and Egress traffic at the Pod level, effectively reducing the blast radius of potential breaches.
Use this skill when hardening a Kubernetes cluster, setting up network segmentation between different application tiers (e.g., frontend, backend, database), or restricting access to sensitive cloud metadata endpoints.
Any agent capable of managing Kubernetes clusters via kubectl and modifying YAML configurations (e.g., Claude Code, OpenClaw, Codex).
This skill has not been reviewed by our automated audit pipeline yet.
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
Monitoring Stack Deployer
Deploy and configure production-ready monitoring stacks (Prometheus, Grafana, Datadog) with collectors, dashboards, and alerting rules for Kubernetes, Docker, o
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) postings to extract victim, group, sector, and timeline intelligence for threat hunting and risk assessment.
Evaluating Threat Intelligence Platforms
Guides procurement, evaluation, and proof-of-concept testing for Threat Intelligence Platforms (MISP, OpenCTI, ThreatConnect, Anomali, EclecticIQ) based on inte
Kube Audit Kit
Read-only Kubernetes security audit toolkit that exports cluster resources, sanitizes metadata, groups applications, and generates PSS/NSA-compliant audit repor
Terradev — Cross‑Cloud GPU Provisioning
Provision and manage GPUs across clouds, create GPU Kubernetes clusters, deploy inference endpoints, and burst local compute to cloud with BYOAPI credential saf
Performing Threat Modeling with OWASP Threat Dragon
Use OWASP Threat Dragon to create data-flow diagrams, apply STRIDE/LINDDUN threat classifications, and generate threat-model reports to guide secure design revi
Kurtosis Cluster Manage
Switch and manage Kurtosis clusters (Docker vs Kubernetes), list available clusters, and configure the Kurtosis engine and gateway for the chosen backend.