{"id":"5c7da046-08f5-4260-acd9-a739d79588a1","shortId":"WgujGe","kind":"skill","title":"Check Kubernetes hosts against CIS guidance with kube-bench before audit or hardening work","tagline":"Run a benchmark-driven posture check on Kubernetes nodes and control planes before an audit, upgrade, or hardening sprint starts.","description":"# Check Kubernetes hosts against CIS guidance with kube-bench before audit or hardening work\n\nRun a benchmark-driven posture check on Kubernetes nodes and control planes before an audit, upgrade, or hardening sprint starts.\n\n## Prerequisites\n\nkube-bench binary or container image, access to Kubernetes nodes or cluster context, benchmark profile matching the target environment\n\n## Installation\n\nRequirements and caveats from upstream:\n- [![Docker Pulls][docker-pull]][docker]\n- [docker-pull]: https://img.shields.io/docker/pulls/aquasec/kube-bench?logo=docker&label=docker%20pulls%20%2F%20kube-bench\n- [docker]: https://hub.docker.com/r/aquasec/kube-bench\n\nBasic usage or getting-started notes:\n- There are multiple ways to run kube-bench.\n- You can run kube-bench inside a pod, but it will need access to the host's PID namespace in order to check the running processes, as well as access to some directories on the host where config files and other files ar...\n- The supplied job.yaml [file](job.yaml) can be applied to run the tests as a job. For example:\n\n- Source: https://github.com/aquasecurity/kube-bench\n- Extracted from upstream docs: https://raw.githubusercontent.com/aquasecurity/kube-bench/HEAD/README.md\n\n## Documentation\n\n- https://github.com/aquasecurity/kube-bench\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work/)","tags":["check","kubernetes","hosts","against","cis","guidance","with","kube","bench","before","audit","hardening"],"capabilities":["skill","source-agentskillexchange","skill-check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,450 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:09:47.505Z","embedding":null,"createdAt":"2026-05-18T13:15:38.262Z","updatedAt":"2026-05-18T19:09:47.505Z","lastSeenAt":"2026-05-18T19:09:47.505Z","tsv":"'/aquasecurity/kube-bench':196,207 '/aquasecurity/kube-bench/head/readme.md':203 '/docker/pulls/aquasec/kube-bench?logo=docker&label=docker%20pulls%20%2f%20kube-bench':111 '/r/aquasec/kube-bench':115 '/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work/)':214 'access':81,145,162 'agent':209 'agentskillexchange.com':213 'agentskillexchange.com/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work/)':212 'appli':183 'ar':175 'audit':12,31,48,67 'basic':116 'bench':10,46,76,131,137 'benchmark':19,55,88 'benchmark-driven':18,54 'binari':77 'caveat':97 'check':1,22,37,58,155 'cis':5,41 'cluster':86 'config':170 'contain':79 'context':87 'control':27,63 'directori':165 'doc':200 'docker':100,103,105,107,112 'docker-pul':102,106 'document':204 'driven':20,56 'environ':93 'exampl':192 'exchang':211 'extract':197 'file':171,174,179 'get':120 'getting-start':119 'github.com':195,206 'github.com/aquasecurity/kube-bench':194,205 'guidanc':6,42 'harden':14,34,50,70 'host':3,39,148,168 'hub.docker.com':114 'hub.docker.com/r/aquasec/kube-bench':113 'imag':80 'img.shields.io':110 'img.shields.io/docker/pulls/aquasec/kube-bench?logo=docker&label=docker%20pulls%20%2f%20kube-bench':109 'insid':138 'instal':94 'job':190 'job.yaml':178,180 'kube':9,45,75,130,136 'kube-bench':8,44,74,129,135 'kubernet':2,24,38,60,83 'match':90 'multipl':125 'namespac':151 'need':144 'node':25,61,84 'note':122 'order':153 'pid':150 'plane':28,64 'pod':140 'postur':21,57 'prerequisit':73 'process':158 'profil':89 'pull':101,104,108 'raw.githubusercontent.com':202 'raw.githubusercontent.com/aquasecurity/kube-bench/head/readme.md':201 'requir':95 'run':16,52,128,134,157,185 'skill':210 'skill-check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work' 'sourc':193,208 'source-agentskillexchange' 'sprint':35,71 'start':36,72,121 'suppli':177 'target':92 'test':187 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'upgrad':32,68 'upstream':99,199 'usag':117 'way':126 'well':160 'work':15,51","prices":[{"id":"d2924c15-0a35-48ef-920e-48bdef7243e3","listingId":"5c7da046-08f5-4260-acd9-a739d79588a1","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:15:38.262Z"}],"sources":[{"listingId":"5c7da046-08f5-4260-acd9-a739d79588a1","source":"github","sourceId":"agentskillexchange/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work","isPrimary":false,"firstSeenAt":"2026-05-18T13:15:38.262Z","lastSeenAt":"2026-05-18T19:09:47.505Z"}],"details":{"listingId":"5c7da046-08f5-4260-acd9-a739d79588a1","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"85852e6e24d9cfee9889bef88a906469830f3a0a","skill_md_path":"skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Check Kubernetes hosts against CIS guidance with kube-bench before audit or hardening work","description":"Run a benchmark-driven posture check on Kubernetes nodes and control planes before an audit, upgrade, or hardening sprint starts."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/check-kubernetes-hosts-against-cis-guidance-with-kube-bench-before-audit-or-hardening-work"},"updatedAt":"2026-05-18T19:09:47.505Z"}}