semgrep vs analyzing-kubernetes-audit-logs
semgrep and analyzing-kubernetes-audit-logs are both security skills. analyzing-kubernetes-audit-logs scores higher (84 vs 51 out of 100). analyzing-kubernetes-audit-logs has more GitHub stars (35k), and semgrep was updated more recently (5 days ago). The table compares them side by side.
| semgrep | analyzing-kubernetes-audit-logs | |
|---|---|---|
| Score | 51 / 100 | 84 / 100 |
| What it does | Run Semgrep security and code quality analysis | Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules from the event patterns. Use when investigating a suspected cluster compromise, reconstructing what an attacker did through the API server, or writing Kubernetes-specific detection content. Keywords: audit policy, audit log, kube-apiserver, exec into pod, RBAC change, anonymous access, detection rules. Do not use for syscall-level detection inside a running container - use detecting-container-runtime-threats-with-falco. ' |
| Publisher | Community: jmylchreest | Community: mukul975 |
| Grades | Maintenance A, Licence A, Quality D | Maintenance B, Licence A, Quality A |
| npm downloads a week | Not on npm | Not on npm |
| Runs | Skill | Skill |
| Works with | Claude Code, Claude apps | Claude Code, Claude apps |
| GitHub stars | 19 | 34,884 |
| Last commit | 19 Oct 2026 | 31 Aug 2026 |
| Licence | MIT | Apache-2.0 |
| Listed since | 20 Oct 2026 | 22 Oct 2026 |
| Install semgrep | Install analyzing-kubernetes-audit-logs |
Questions
Is semgrep or analyzing-kubernetes-audit-logs more popular?
analyzing-kubernetes-audit-logs has more GitHub stars: 34,884.
Can I use semgrep and analyzing-kubernetes-audit-logs together?
Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.