ClawAudit verdict

k8s-ops

88
🟢 Trusted
Low risk — reviewed by ClawAudit, behavior matches stated purpose

Kubernetes cluster management plugin using local kubectl with user-configured kubeconfig; extensive security warnings and best practices are documented inline, and all 32 operations are standard K8s management tasks.

⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.

Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

0
security
100
transparency
100
maintenance

Findings (5)

Pattern match high

Accesses Kubernetes config (may contain cluster credentials)

guides/01-installation.md · code · ~/.kube/config

Pattern match high

References sudo — requests elevated privileges

guides/01-installation.md · code · sudo

Pattern match high

apt-get install — installs system packages

guides/01-installation.md · code · apt-get install

Pattern match high

yum install — installs system packages

guides/01-installation.md · code · yum install

Pattern match medium

Dynamic import() — loads module at runtime

dist/index.d.ts · prose · downgraded · import("

Why the tier is capped

Execution sink present in raw bytes (Hard Floor: class B). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.

Permissions & capabilities

Requires 1 system binary. (1 elevated: kubectl).

Is this flag fair?

Check another skill Browse the registry Auditing your own skills or configs? Use the API