information-disclosure

Estrellas2737

Forks699

Actualizado1 de junio de 2026 a las 15:28

Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

kubernetes-sigs

kubernetes-sigs/kueue

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	information-disclosure
description	Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Information Disclosure (CWE-200, CWE-522, CWE-532, CWE-552)

Full Kubernetes objects logged with %+v / %#v. Required: klog.KObj(obj) plus structured key/value pairs.
Webhook responses, events, or status fields that echo request bodies, stack traces, or credential-bearing fields.
Credentials or tokens persisted in annotations, labels, env vars, or status — credentials belong in mounted Secrets.
kubeconfigs logged, echoed in status, or written with insecure-skip-tls-verify: true.
Visibility-API or metrics queries that widen results past the caller's namespace/queue.
Secret-bearing data written to .status — status updates are at-least-once, so every retry leaks.

Más de este repositorio

mismo repositorio

was-cluster

kubernetes-sigs/kueue

Build and manage a kind cluster for Workload-Aware Scheduling (WAS) e2e tests. Use when the user wants to set up, run tests against, or tear down a WAS test cluster built from Kubernetes main.

2026-07-102.7k

avoidable-complexity

kubernetes-sigs/kueue

Flag solutions more elaborate than the problem requires — complexity that exists only because the author reached for a pattern.

2026-06-012.7k

duplicated-logic

kubernetes-sigs/kueue

Flag identical (or near-identical) blocks across types/adapters/call sites that should live in a shared helper — and newly extracted helpers with only one caller.

2026-06-012.7k

illogical-structure

kubernetes-sigs/kueue

Flag code organization that a future maintainer will struggle to follow, modify, or extend.

2026-06-012.7k

misplaced-logic

kubernetes-sigs/kueue

Flag code put somewhere a reader would not expect to find it — cleanup scattered across callers, validation deep in business logic.

2026-06-012.7k

nonsensical-decisions

kubernetes-sigs/kueue

Flag unnecessary indirection, mismatched abstractions, or confusing data flow that obscures what the code is doing.

2026-06-012.7k

name	information-disclosure
description	Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Information Disclosure (CWE-200, CWE-522, CWE-532, CWE-552)

Full Kubernetes objects logged with %+v / %#v. Required: klog.KObj(obj) plus structured key/value pairs.
Webhook responses, events, or status fields that echo request bodies, stack traces, or credential-bearing fields.
Credentials or tokens persisted in annotations, labels, env vars, or status — credentials belong in mounted Secrets.
kubeconfigs logged, echoed in status, or written with insecure-skip-tls-verify: true.
Visibility-API or metrics queries that widen results past the caller's namespace/queue.
Secret-bearing data written to .status — status updates are at-least-once, so every retry leaks.