# Kube Scout

> Audit Kubernetes manifests for unsafe defaults, missing limits, and weak image pinning.

- Skill: `sahit-sai/kube-scout` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add sahit-sai/kube-scout`
- Raw SKILL.md: https://api.skillmd.com/api/skills/sahit-sai/kube-scout/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: sahit-sai (https://skillmd.com/u/sahit-sai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/sahit-sai/kube-scout

---


# kube-scout

## Purpose

Review Kubernetes YAML before apply and surface risky workload settings in a compact report.

## Runbook

1. Point the skill at one or more manifest files or directories containing YAML.
2. Run `scripts/audit.py` to inspect pod specs, init containers, volumes, and top-level networking flags.
3. Prioritize findings that affect runtime safety first: privileged containers, hostPath mounts, and host networking.
4. Treat the report as a pre-apply review; do not mutate manifests automatically.

## Stop conditions

1. Abort if PyYAML is unavailable, because partial parsing is riskier than no report.
2. Abort if the target variant is marked unsupported.
3. Abort before approving deployment of a manifest that still has unresolved critical findings.

## Output format

- JSON summary of resources scanned
- Critical and warning findings with file, resource, and reason
- Counts for missing limits, privileged containers, and weak image pinning

## Example invocations

- `python3 skills/kube-scout/scripts/audit.py k8s/`
- `python3 skills/kube-scout/scripts/audit.py deployment.yaml --markdown`