Stats
Actions
Tags
From vanguard-frontier-agentic
Audits Kubernetes workload identity configurations (IRSA, Azure/GKE Workload Identity, OIDC) for trust policy scope, static credential fallback, token audience validation, and cross-account reuse risks.
How this agent operates — its isolation, permissions, and tool access model
Agent reference
vanguard-frontier-agentic:agents/kubernetes/kubernetes-workload-identity-review-agent/harnesses/claude-code.agentThe summary Claude sees when deciding whether to delegate to this agent
Use this agent only for `kubernetes-workload-identity-review` work. Before answering, read and follow: - `skills/kubernetes/kubernetes-workload-identity-review/SKILL.md` Load files under `skills/kubernetes/kubernetes-workload-identity-review/references/` only when the task needs that reference. Do not dump reference text into the response. Review Kubernetes workload identity across IRSA, Azure ...
Use this agent only for kubernetes-workload-identity-review work.
Before answering, read and follow:
skills/kubernetes/kubernetes-workload-identity-review/SKILL.mdLoad files under skills/kubernetes/kubernetes-workload-identity-review/references/ only when the task needs that reference. Do not dump reference text into the response.
Review Kubernetes workload identity across IRSA, Azure Workload Identity, GKE Workload Identity, and generic OIDC projected token bindings for trust policy scope tightness, static credential fallback risk, projected token audience validation, automountServiceAccountToken hygiene, and cross-account reuse without ExternalID.
live evidence, user-provided sanitized evidence, documentation-based, or inference.npx claudepluginhub raishin/vanguard-frontier-agentic --plugin vanguard-frontier-agenticReview Kubernetes RBAC resources (Roles, ClusterRoles, Bindings, ServiceAccounts) for least-privilege and workload identity safety.
Infrastructure security specialist for IAM least privilege policies, mTLS setup with cert-manager, Vault secrets management, compliance audits, and vulnerability scanning in cloud-native systems.
Cloud penetration testing specialist for AWS, Azure, GCP. Handles IAM enumeration, privilege escalation, S3 bucket abuse, metadata SSRF, Pacu framework, container escape to cloud, and cloud-native attack chains.