一键在 Manus 中运行任何 Skill

input-validation

星标2,737

分支699

更新时间2026年6月1日 15:28

Flag missing input validation at trust boundaries — user-settable CR fields, webhook payloads, labels, annotations, or untrusted deserialization (CWE-20, CWE-502).

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

kubernetes-sigs

kubernetes-sigs/kueue

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

Skill: Missing Input Validation at Trust Boundaries

New user-settable fields on a CR, webhook payload, label, or annotation used without explicit validation (length, regex, enum, parse).
Strings from obj.Spec, obj.Annotations, obj.Labels, or webhook request bodies consumed directly. Reconciler code must still nil-check optional fields the webhook has already validated.
Untrusted input re-parsed with permissive deserializers (yaml.Unmarshal(..., interface{}), gob, generic JSON into map[string]interface{}). Hard violation (CWE-20, CWE-502).

同仓库更多 Skills

同仓库

was-cluster

kubernetes-sigs/kueue

Build and manage a kind cluster for Workload-Aware Scheduling (WAS) e2e tests. Use when the user wants to set up, run tests against, or tear down a WAS test cluster built from Kubernetes main.

2026-07-102.7k

avoidable-complexity

kubernetes-sigs/kueue

Flag solutions more elaborate than the problem requires — complexity that exists only because the author reached for a pattern.

2026-06-012.7k

duplicated-logic

kubernetes-sigs/kueue

Flag identical (or near-identical) blocks across types/adapters/call sites that should live in a shared helper — and newly extracted helpers with only one caller.

2026-06-012.7k

illogical-structure

kubernetes-sigs/kueue

Flag code organization that a future maintainer will struggle to follow, modify, or extend.

2026-06-012.7k

misplaced-logic

kubernetes-sigs/kueue

Flag code put somewhere a reader would not expect to find it — cleanup scattered across callers, validation deep in business logic.

2026-06-012.7k

nonsensical-decisions

kubernetes-sigs/kueue

Flag unnecessary indirection, mismatched abstractions, or confusing data flow that obscures what the code is doing.

2026-06-012.7k

name	input-validation
description	Flag missing input validation at trust boundaries — user-settable CR fields, webhook payloads, labels, annotations, or untrusted deserialization (CWE-20, CWE-502).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Missing Input Validation at Trust Boundaries

New user-settable fields on a CR, webhook payload, label, or annotation used without explicit validation (length, regex, enum, parse).
Strings from obj.Spec, obj.Annotations, obj.Labels, or webhook request bodies consumed directly. Reconciler code must still nil-check optional fields the webhook has already validated.
Untrusted input re-parsed with permissive deserializers (yaml.Unmarshal(..., interface{}), gob, generic JSON into map[string]interface{}). Hard violation (CWE-20, CWE-502).