Monitor open-source information and information sites using [organization-defined].
EnglishMinimize the admission of containers wishing to share the host network namespace…
EnglishEnsure that the seccomp profile is set to docker/default in your pod definitions…
EnglishEnsure that the --service-account-private-key-file argument is set as appropriate…
EnglishEnsure that the kubelet-config.json file permissions are set to 644 or more restrictive…
EnglishConfigure the maximum size of the audit log file to prevent disk space…
EnglishA cybersecurity supply chain risk management program, strategy, objectives, policies, and processes are established and agreed to by organizational…
EnglishInventories of data and corresponding metadata for designated data types are…
EnglishAdversaries may attempt to access cached domain credentials used to allow authentication to occur in the event a domain controller is unavailable.
EnglishIncludes AU 13(1) Use of Automated Tools, Cis Kubernetes V1110 5.2.5, Cis Kubernetes V1120 5.6.2, and other workflows.
Supported by the Atlas install prompt. Skill-specific requirements vary.
Pack stats
What’s included
AU 13(1) Use of Automated Tools
Monitor open-source information and information sites using [organization-defined].
Cis Kubernetes V1110 5.2.5
Minimize the admission of containers wishing to share the host network namespace (Manual)
Cis Kubernetes V1120 5.6.2
Ensure that the seccomp profile is set to docker/default in your pod definitions (Manual)
Cis Ocp V190 1.3.3
Ensure that the --service-account-private-key-file argument is set as appropriate (Manual)
Cis Oke V180 3.1.1
Ensure that the kubelet-config.json file permissions are set to 644 or more restrictive (Automated)
CIS Ubuntu 14.04 LTS 4.1.1.1 Ensure Audit Log Storage Size Is Configured
Configure the maximum size of the audit log file to prevent disk space exhaustion
GV.SC 01 Gvsc 01
A cybersecurity supply chain risk management program, strategy, objectives, policies, and processes are established and agreed to by organizational st
ID.AM 07 Idam 07
Inventories of data and corresponding metadata for designated data types are maintained
PR.AA 02 Praa 02
Identities are proofed and bound to credentials based on the context of interactions
T1003.005 Cached Domain Credentials
Adversaries may attempt to access cached domain credentials used to allow authentication to occur in the event a domain controller is unavailable.
Cis Gke V170 3.2.9
Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)
Quick start
- Choose your skills. Select individual skills above, or choose the entire pack.
- Copy the install prompt. Use Copy install prompt above the list.
- Send it to your agent. Paste into your coding agent’s chat. Your agent reviews the source and guides the setup.
Try it with your agent
After installation, start with a request like:
Use the AU 13(1) Use of Automated Tools skill to help with my task.
Ask me for the context you need before getting started.Requirements & license
- A coding agent that can access your project files and install skills.
- Your agent checks each skill’s instructions, dependencies, and permissions during setup.
- Reported license for the skills shown: AGPL-3.0. The author’s terms apply.