
This skill follows a structured workflow to catch insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. It loads platform-specific references for EKS, GKE, AKS, or OpenShift only when needed, then produces remediated manifests with validation steps: kubectl dry-run, schema checks, and policy scans. The workflow is built for AI-assisted developers, platform engineers, and SREs who generate or review Kubernetes configurations.