k8s-backup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited k8s-backup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Manage backups and restores using kubectl-mcp-server's Velero tools.
Use this skill when:
| Priority | Rule | Impact | Tools |
|---|---|---|---|
| 1 | Verify Velero installation first | CRITICAL | velero_detect_tool |
| 2 | Check backup location before create | HIGH | velero_backup_locations_list_tool |
| 3 | Wait for backup completion | HIGH | velero_backup_get_tool |
| 4 | Test restores to non-prod first | MEDIUM | velero_restore_create_tool |
| Task | Tool | Example |
|---|---|---|
| Detect Velero | velero_detect_tool | velero_detect_tool() |
| List backups | velero_backups_list_tool | velero_backups_list_tool() |
| Create backup | velero_backup_create_tool | velero_backup_create_tool(name, namespaces) |
| Restore | velero_restore_create_tool | velero_restore_create_tool(name, backup_name) |
velero_detect_tool()
velero_backup_locations_list_tool()velero_backup_create_tool(
name="my-backup",
namespaces=["default", "app-namespace"]
)
velero_backup_create_tool(
name="app-backup",
namespaces=["default"],
label_selector="app=my-app"
)
velero_backup_create_tool(
name="config-backup",
namespaces=["default"],
exclude_resources=["pods", "replicasets"]
)
velero_backup_create_tool(
name="daily-backup",
namespaces=["production"],
ttl="720h"
)velero_backups_list_tool()
velero_backup_get_tool(name="my-backup")velero_restore_create_tool(
name="my-restore",
backup_name="my-backup"
)
velero_restore_create_tool(
name="my-restore",
backup_name="my-backup",
namespace_mappings={"old-ns": "new-ns"}
)
velero_restore_create_tool(
name="config-restore",
backup_name="my-backup",
include_resources=["configmaps", "secrets"]
)
velero_restore_create_tool(
name="partial-restore",
backup_name="my-backup",
exclude_resources=["persistentvolumeclaims"]
)velero_restores_list_tool()
velero_restore_get_tool(name="my-restore")velero_schedules_list_tool()
velero_schedule_get_tool(name="daily-backup")
kubectl_apply(manifest="""
apiVersion: velero.io/v1
kind: Schedule
metadata:
name: daily-backup
namespace: velero
spec:
schedule: "0 2 * * *"
template:
includedNamespaces:
- production
ttl: 720h
""")from datetime import datetime
velero_backup_create_tool(
name=f"dr-backup-{datetime.now().strftime('%Y%m%d-%H%M%S')}",
namespaces=["production"]
)
velero_backup_get_tool(name="dr-backup-20260130-120000")velero_detect_tool()
velero_backups_list_tool()
velero_restore_create_tool(
name="dr-restore",
backup_name="dr-backup-..."
)
velero_restore_get_tool(name="dr-restore") velero install --provider aws --bucket my-bucket --secret-file ./credentials~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.