Modify kubeadm Kubernetes control plane static pod manifests safely. Use when an agent needs to add, remove, or change flags/arguments on kube-apiserver, kube-controller-manager, kube-scheduler, or etcd, or when adding volume mounts to these components (e.g., for audit policies, encryption config, webhook config). Triggers on tasks involving kubeadm cluster configuration, control plane hardening, enabling feature gates, adding admission controllers, or any modification to files in /etc/kubernetes/manifests/.
Test container runtime vulnerabilities (runc, crun, containerd, CRI-O) against the full container stack โ from direct runtime invocation through Docker, containerd, Kubernetes API, and node-level access. Use when validating whether a container runtime vulnerability is exploitable through each layer of the stack, or when you need to determine which layers block an exploit and which don't. Triggers on tasks involving container escape testing, runc/crun vulnerability validation, container runtime security research, testing security boundaries between Docker/containerd/CRI-O/Kubernetes and the OCI runtime, or determining exploitability of OCI runtime bugs across different deployment contexts. Requires labctl for ephemeral test environments.
Create, manage, and interact with iximiuz Labs playgrounds using labctl. Use this skill whenever the task involves spinning up a clean testing environment, running commands on remote lab machines, deploying and testing applications in isolated VMs, or performing security research in sandboxed infrastructure. Triggers on mentions of labctl, iximiuz, lab playgrounds, needing a fresh Linux/Docker/Kubernetes environment for testing, wanting to test code on a remote machine, or setting up infrastructure for penetration testing or application deployment. Also use when the user wants to copy files to/from a remote lab, forward ports to a running playground, or clean up lab resources.
Guide for writing Go programs that interact with the Docker daemon via the Docker socket. Use when building Go code that needs to: list/inspect/pull/remove Docker images, list/create/start/stop/remove containers, manage networks or volumes, exec commands in containers, stream container logs, or perform any other Docker Engine API operation from Go. Triggers on requests involving Go + Docker, Go + containers, or Go + Docker socket.
How to query an Obsidian vault programmatically using `obsidian eval` to search, filter, and analyze notes. Use this skill whenever you need to search notes by tag, folder, frontmatter, content, or metadata โ including finding notes missing frontmatter, listing tags, counting notes, or building any vault-wide query. Also use when the user asks to find, list, filter, audit, or report on notes in their Obsidian vault. This skill documents a critical syntax restriction in the Obsidian CLI eval command that will cause failures if not followed.
Exploit an unauthenticated Kubernetes kubelet API (port 10250) to retrieve the cluster CA private key, even on hardened clusters with distroless containers. Use when performing authorized security testing against a Kubernetes cluster that has an exposed kubelet with anonymous auth enabled and AlwaysAllow authorization. Triggers on tasks involving kubelet exploitation, Kubernetes penetration testing, read-write kubelet attacks, distroless container exploitation, or extracting secrets from Kubernetes clusters via the kubelet API. Requires network access to the kubelet port (10250). No local `etcdctl` needed โ the script runs etcdctl inside the etcd container.
Create Kind (Kubernetes in Docker) clusters with Kubernetes API server auditing enabled. Use when setting up local Kubernetes clusters that need audit logging, testing audit policies, or debugging Kubernetes API interactions. Focuses on the critical two-level volume mount configuration required to get auditing working correctly.