Skip to main content

manage-kubernetes-secrets

Facilitates secure secrets management in Kubernetes with encryption, rotation, and integration with cloud secret managers.

Install this skill

or
72/100

Security score

The manage-kubernetes-secrets skill was audited on Mar 3, 2026 and we found 6 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 355

Curl to non-GitHub URL

SourceSKILL.md
355**On failure:** For ACME challenge failures, verify DNS points to Ingress LoadBalancer IP for http01, or Route53 IAM permissions for dns01. For rate limit errors, use `letsencrypt-staging` issuer for
medium line 446

Webhook reference - potential data exfiltration

SourceSKILL.md
446- **External Secrets refresh too slow**: Default 1h refresh means secrets changes take up to an hour to propagate. Lower refreshInterval for critical secrets, use webhooks for immediate updates.
medium line 98

Access to system keychain/keyring

SourceSKILL.md
98--database-encryption-key projects/PROJECT_ID/locations/LOCATION/keyRings/RING_NAME/cryptoKeys/KEY_NAME
low line 193

External URL reference

SourceSKILL.md
193helm repo add external-secrets https://charts.external-secrets.io
low line 319

External URL reference

SourceSKILL.md
319vaultUrl: "https://my-keyvault.vault.azure.net"
low line 355

External URL reference

SourceSKILL.md
355**On failure:** For ACME challenge failures, verify DNS points to Ingress LoadBalancer IP for http01, or Route53 IAM permissions for dns01. For rate limit errors, use `letsencrypt-staging` issuer for
Scanned on Mar 3, 2026
View Security Dashboard