k8s-storage — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited k8s-storage (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Manage Kubernetes storage using kubectl-mcp-server's storage tools.
Use this skill when:
| Priority | Rule | Impact | Tools |
|---|---|---|---|
| 1 | Verify storage class exists before PVC | CRITICAL | get_storage_classes |
| 2 | Check PVC status before pod deployment | HIGH | describe_pvc |
| 3 | Review access modes for multi-pod access | MEDIUM | get_pvcs |
| 4 | Monitor PV reclaim policy | LOW | get_persistent_volumes |
| Task | Tool | Example |
|---|---|---|
| List PVCs | get_pvcs | get_pvcs(namespace) |
| PVC details | describe_pvc | describe_pvc(name, namespace) |
| Storage classes | get_storage_classes | get_storage_classes() |
| List PVs | get_persistent_volumes | get_persistent_volumes() |
get_pvcs(namespace="default")
describe_pvc(name="my-pvc", namespace="default")
kubectl_apply(manifest="""
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: my-pvc
namespace: default
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi
storageClassName: standard
""")
kubectl_delete(resource_type="pvc", name="my-pvc", namespace="default")get_storage_classes()
kubectl_apply(manifest="""
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: fast-ssd
provisioner: kubernetes.io/gce-pd
parameters:
type: pd-ssd
reclaimPolicy: Delete
volumeBindingMode: WaitForFirstConsumer
""")get_persistent_volumes()
describe_persistent_volume(name="pv-001")kubectl_apply(manifest="""
apiVersion: snapshot.storage.k8s.io/v1
kind: VolumeSnapshot
metadata:
name: my-snapshot
namespace: default
spec:
volumeSnapshotClassName: csi-snapclass
source:
persistentVolumeClaimName: my-pvc
""")
kubectl_apply(manifest="""
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: restored-pvc
spec:
dataSource:
name: my-snapshot
kind: VolumeSnapshot
apiGroup: snapshot.storage.k8s.io
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi
""")describe_pvc(name="my-pvc", namespace="default")
get_events(namespace="default")
describe_pod(name="my-pod", namespace="default")~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.