How do I install the K8S Security Policies skill?

Run npx skillmds@latest add dokhacgiakhoa/k8s-security-policies in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is K8S Security Policies safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with K8S Security Policies?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is K8S Security Policies free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published K8S Security Policies?

Dokhacgiakhoa (@dokhacgiakhoa) published this skill. Their other Agent Skills are listed on their SkillMD profile.

K8S Security Policies by dokhacgiakhoa

Name: K8S Security Policies
Rating: 4.666666666666667 (3 reviews)
Author: Dokhacgiakhoa

K8S Security Policies

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.

Dokhacgiakhoa Updated Sep 9, 2026 505 repo stars

File contents

Kubernetes Security Policies

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

Do not use this skill when

The task is unrelated to kubernetes security policies
You need a different domain or tool outside this scope

Instructions

Clarify goals, constraints, and required inputs.
Apply relevant best practices and validate outcomes.
Provide actionable steps and verification.
If detailed examples are required, open resources/implementation-playbook.md.

Purpose

Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC.

Use this skill when

Implement network segmentation
Configure pod security standards
Set up RBAC for least-privilege access
Create security policies for compliance
Implement admission control
Secure multi-tenant clusters

Pod Security Standards

🧠 Knowledge Modules (Fractal Skills)

1. 1. Privileged (Unrestricted)

2. 2. Baseline (Minimally restrictive)

3. 3. Restricted (Most restrictive)

4. Default Deny All

5. Allow Frontend to Backend

6. Allow DNS

7. Role (Namespace-scoped)

8. ClusterRole (Cluster-wide)

9. RoleBinding

10. Restricted Pod

11. ConstraintTemplate

12. Constraint

13. PeerAuthentication (mTLS)

14. AuthorizationPolicy

15. CIS Kubernetes Benchmark

16. NIST Cybersecurity Framework

---name: k8s-security-policiesdescription: Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.--- # Kubernetes Security Policies Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes. ## Do not use this skill when - The task is unrelated to kubernetes security policies - You need a different domain or tool outside this scope ## Instructions - Clarify goals, constraints, and required inputs. - Apply relevant best practices and validate outcomes. - Provide actionable steps and verification. - If detailed examples are required, open `resources/implementation-playbook.md`. ## Purpose Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC. ## Use this skill when - Implement network segmentation - Configure pod security standards - Set up RBAC for least-privilege access - Create security policies for compliance - Implement admission control - Secure multi-tenant clusters ## Pod Security Standards ## 🧠 Knowledge Modules (Fractal Skills) ### 1. [1. Privileged (Unrestricted)](./sub-skills/1-privileged-unrestricted.md) ### 2. [2. Baseline (Minimally restrictive)](./sub-skills/2-baseline-minimally-restrictive.md) ### 3. [3. Restricted (Most restrictive)](./sub-skills/3-restricted-most-restrictive.md) ### 4. [Default Deny All](./sub-skills/default-deny-all.md) ### 5. [Allow Frontend to Backend](./sub-skills/allow-frontend-to-backend.md) ### 6. [Allow DNS](./sub-skills/allow-dns.md) ### 7. [Role (Namespace-scoped)](./sub-skills/role-namespace-scoped.md) ### 8. [ClusterRole (Cluster-wide)](./sub-skills/clusterrole-cluster-wide.md) ### 9. [RoleBinding](./sub-skills/rolebinding.md) ### 10. [Restricted Pod](./sub-skills/restricted-pod.md) ### 11. [ConstraintTemplate](./sub-skills/constrainttemplate.md) ### 12. [Constraint](./sub-skills/constraint.md) ### 13. [PeerAuthentication (mTLS)](./sub-skills/peerauthentication-mtls.md) ### 14. [AuthorizationPolicy](./sub-skills/authorizationpolicy.md) ### 15. [CIS Kubernetes Benchmark](./sub-skills/cis-kubernetes-benchmark.md) ### 16. [NIST Cybersecurity Framework](./sub-skills/nist-cybersecurity-framework.md)

Frequently asked questions