auditing-admission-control-policy-gaps SKILL.md skillA
auditing-admission-control-policy-gaps from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/auditing-admission-control-policy-gaps@git:20260828.ce55026Pins git:20260828.ce55026 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/auditing-admission-control-policy-gaps/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260828.ce55026, committed Aug 28, 2026
- Size
- 9,273 bytes
- Repository stars
- 26
- License
- MIT
Audit cluster admission control for gaps that let a non-compliant or hostile workload through: a validating webhook that fails open when its backend is unreachable, a policy that scopes by namespace or label and misses the namespaces that matter, a mutating webhook whose changes are trusted downstream, and an ordering or exemption that lets a privileged pod bypass the checks meant to stop it. Covers Kubernetes admission webhooks and policy engines that are supposed to enforce workload security…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Auditing admission control policy gaps: when the gatekeeper waves it through Admission control is the cluster's gate: every create and update passes through validating and mutating webhooks that are supposed to reject workloads that break policy, privileged pods, unsigned images, over-broad service accounts, host mounts. The gate only protects the cluster if it actually fires on the requests that matter and cannot be skipped. In practice it is riddled with quiet gaps: a webhook configured to fail open so an unreachable backend admits everything, a policy scoped to some namespaces but not the one an attacker targets, an exemption for system workloads that a hostile pod can wear, and a mutating webhook whose output later stages trust without re-validating. A gate with a gap is worse than no gate, because teams believe it is enforcing. You audit this by checking, for each policy, whether it fires on every relevant request and whether anything can bypass it. ## When to use - Admission webhooks or a policy engine are the control keeping non-compliant workloads out of the cluster. …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/auditing-admission-control-policy-gaps@sha256:8ce416d97c90386cThe line at the top of this page pins the label git:20260828.ce55026, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_c4g6icpktjd6lzix)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 28, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9273 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_c4g6icpktjd6lzix GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/auditing-admission-control-policy-gaps GET https://markdownregistry.com/api/v1/blob/8ce416d97c90386cdb82fa985044ba35efe730f9ab7198dbd187d87aa4e8734c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.