Task
SkillSecurityReviews AI agent execution sandboxes for code escape and lateral movement risks.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Task skill
What this skill tells your AI
The instructions your AI receives, as published by gke-labs/kube-agents in .agents/skills/review-security-k8s-agents-sandbox/SKILL.md and read by ahel’s review.
Review execution sandboxes (e.g., Python REPLs, bash tools, WASM) for LLM agents. Treat as highly hostile due to prompt injection risks.
Checks
1. Secure RuntimeClass (CRITICAL)
- Hardened Runtimes: Flag standard pods. Require secure
RuntimeClass(e.g.,gvisor,kata-containers) for sandboxes.
2. Isolation
- Logical Separation: Flag sandboxes sharing a container with the main agent loop, unless permissions/runtime are demonstrably strict.
- Profiles: Require restrictive Seccomp or AppArmor profiles blocking dangerous syscalls.
3. Ephemeral Lifecycles & Limits
- Disposable: Flag reusable sandboxes. Must be ephemeral to prevent persistence/data leaks.
- Resource Limits: Require aggressively low CPU/Memory/Ephemeral Storage
limitsto prevent DoS via infinite loops or memory bombs.
Signals
- GitHub stars
- 54
- Forks
- 36
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
review-security-k8s-agents-sandbox- Source
- github.com/gke-labs/kube-agents