# Feature Gated Insecure Paths

> Flag feature-gated behavior whose security assumptions do not hold in both gate-on and gate-off states; require a comment near the gate check for new alpha attack surface.

- Skill: `kubernetes-sigs-kueue/feature-gated-insecure-paths` (Agent Skill)
- Install (CLI): `npx skillmds@latest add kubernetes-sigs-kueue/feature-gated-insecure-paths`
- Raw SKILL.md: https://api.skillmd.com/api/skills/kubernetes-sigs-kueue/feature-gated-insecure-paths/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: Apache-2.0
- Author: kubernetes-sigs (https://skillmd.com/u/kubernetes-sigs-kueue)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/kubernetes-sigs-kueue/feature-gated-insecure-paths

---


# Skill: Feature-Gated Insecure Paths

- Behavior added behind a feature gate whose security assumptions
  do not hold when the gate is off **and** when it is on. A feature gate must not ship
  a path that would be insecure if accidentally enabled. New alpha gates with new
  attack surface should note the assumption in a code comment near the gate check.