Run any Skill in Manus with one click

information-disclosure

Stars2,737

Forks699

UpdatedJune 1, 2026 at 15:28

Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

kubernetes-sigs

kubernetes-sigs/kueue

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

name	information-disclosure
description	Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Information Disclosure (CWE-200, CWE-522, CWE-532, CWE-552)

Full Kubernetes objects logged with %+v / %#v. Required: klog.KObj(obj) plus structured key/value pairs.
Webhook responses, events, or status fields that echo request bodies, stack traces, or credential-bearing fields.
Credentials or tokens persisted in annotations, labels, env vars, or status — credentials belong in mounted Secrets.
kubeconfigs logged, echoed in status, or written with insecure-skip-tls-verify: true.
Visibility-API or metrics queries that widen results past the caller's namespace/queue.
Secret-bearing data written to .status — status updates are at-least-once, so every retry leaks.

More from this repository

same repository

was-cluster

kubernetes-sigs/kueue

Build and manage a kind cluster for Workload-Aware Scheduling (WAS) e2e tests. Use when the user wants to set up, run tests against, or tear down a WAS test cluster built from Kubernetes main.

2026-07-102.7k

avoidable-complexity

kubernetes-sigs/kueue

Flag solutions more elaborate than the problem requires — complexity that exists only because the author reached for a pattern.

2026-06-012.7k

duplicated-logic

kubernetes-sigs/kueue

Flag identical (or near-identical) blocks across types/adapters/call sites that should live in a shared helper — and newly extracted helpers with only one caller.

2026-06-012.7k

illogical-structure

kubernetes-sigs/kueue

Flag code organization that a future maintainer will struggle to follow, modify, or extend.

2026-06-012.7k

misplaced-logic

kubernetes-sigs/kueue

Flag code put somewhere a reader would not expect to find it — cleanup scattered across callers, validation deep in business logic.

2026-06-012.7k

nonsensical-decisions

kubernetes-sigs/kueue

Flag unnecessary indirection, mismatched abstractions, or confusing data flow that obscures what the code is doing.

2026-06-012.7k

name	information-disclosure
description	Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Information Disclosure (CWE-200, CWE-522, CWE-532, CWE-552)

Full Kubernetes objects logged with %+v / %#v. Required: klog.KObj(obj) plus structured key/value pairs.
Webhook responses, events, or status fields that echo request bodies, stack traces, or credential-bearing fields.
Credentials or tokens persisted in annotations, labels, env vars, or status — credentials belong in mounted Secrets.
kubeconfigs logged, echoed in status, or written with insecure-skip-tls-verify: true.
Visibility-API or metrics queries that widen results past the caller's namespace/queue.
Secret-bearing data written to .status — status updates are at-least-once, so every retry leaks.