review-security-k8s-main · diff

git:20260521.2bcbdef to git:20260521.0dd191f

7 added, 2 removed. Audit A to A.

---

name: review-security-k8s-main

description: Orchestrates comprehensive Kubernetes security reviews.

---

# Task

Coordinate Kubernetes security review sub-agents, gather findings, and produce a summarized JSON report.

# Workflow

## 1. Context

Invoke `review-security-k8s-understand`. Wait for summary.

## 2. Parallel Reviews

Pass context and launch in parallel:

- `review-security-k8s-rbac`

- `review-security-k8s-nodes`

- `review-security-k8s-network`

- `review-security-k8s-gateway`

- `review-security-k8s-namespaces`

- `review-security-k8s-service-accounts`

- `review-security-k8s-storage`

- `review-security-k8s-admission`

- `review-security-k8s-pod`

- `review-security-k8s-agents-main`

**CRITICAL**: Instruct each to output JSON:

```json

[{"agent": "<skill>", "findings": [{"message": "<desc>", "file": "<name>", "line": "<num>"}]}]

```

(Return empty list if no findings). Wait for completion.

- ## 3. Aggregation

- Merge into a single JSON array. Output MUST be valid JSON string (markdown blocks okay). Omit agents with no findings or return empty `findings`.

+ ## 3. Triage & Filtering

+ Evaluate the raw findings against the project context to determine actual risk. Filter out findings that are functionally required by the workload's specific role or adequately mitigated by broader architectural controls.

+ - *Example:* Filter out `hostPath` or `privileged` warnings for recognized infrastructure daemonsets (e.g., CSI drivers).

+ - *Example:* Downgrade or filter missing `NetworkPolicy` warnings if the context confirms a strict Service Mesh is handling all routing and authorization.

+ ## 4. Aggregation

+ Merge the filtered findings into a single JSON array. Output MUST be valid JSON string (markdown blocks okay). Omit agents with no findings or return empty `findings`.