security-review vs analyzing-kubernetes-audit-logs
security-review and analyzing-kubernetes-audit-logs are both security skills. security-review scores higher (89 vs 84 out of 100). security-review has more GitHub stars (41k), and security-review was updated more recently (today). The table compares them side by side.
| security-review | analyzing-kubernetes-audit-logs | |
|---|---|---|
| Score | 89 / 100 | 84 / 100 |
| What it does | Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork. | Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules from the event patterns. Use when investigating a suspected cluster compromise, reconstructing what an attacker did through the API server, or writing Kubernetes-specific detection content. Keywords: audit policy, audit log, kube-apiserver, exec into pod, RBAC change, anonymous access, detection rules. Do not use for syscall-level detection inside a running container - use detecting-container-runtime-threats-with-falco. ' |
| Publisher | Community: codewhale-hq | Community: mukul975 |
| Grades | Maintenance A, Licence A, Quality A | Maintenance B, Licence A, Quality A |
| npm downloads a week | Not on npm | Not on npm |
| Runs | Skill | Skill |
| Works with | Claude Code, Claude apps | Claude Code, Claude apps |
| GitHub stars | 41,112 | 34,884 |
| Last commit | 23 Oct 2026 | 31 Aug 2026 |
| Licence | MIT | Apache-2.0 |
| Listed since | 23 Oct 2026 | 22 Oct 2026 |
| Install security-review | Install analyzing-kubernetes-audit-logs |
Questions
Is security-review or analyzing-kubernetes-audit-logs more popular?
security-review has more GitHub stars: 41,112.
Can I use security-review and analyzing-kubernetes-audit-logs together?
Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.