mtls-configuration

Name: mtls-configuration
Author: sickn33

Seguro

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.

Soporta: Claude Codex Code(CC)

⚠️ 67 Deficiente

Descargar el ZIP de la skill

Subir en Claude

Ve a Configuración → Capacidades → Skills → Subir skill

Activa y empieza a usar

Pruébalo

"test.default"

Resultado esperado:

Auditoría de seguridad

Seguro

v1 • 2/25/2026

This is a documentation skill providing mTLS configuration templates for Kubernetes service meshes (Istio, Linkerd, SPIFFE). All 42 static findings are false positives: external_commands detected are kubectl/istioctl examples in code blocks (not execution), network references are documentation URLs, certificate paths are template examples (not real credentials), and weak crypto flags were triggered by TLS mode names (ISTIO_MUTUAL, MUTUAL) which are standard secure configurations. No malicious intent or security risks identified.

Archivos escaneados

362

Líneas analizadas

hallazgos

Auditorías totales

Problemas de riesgo alto (1)

SKILL.md:22 SKILL.md:307-318 SKILL.md:322-339

False Positive: External Commands Detection

Static scanner detected 'Ruby/shell backtick execution' at 18 locations. These are kubectl, istioctl, openssl command examples in markdown code blocks - not actual execution. Users would run these commands themselves as part of mTLS configuration.

Problemas de riesgo medio (3)

SKILL.md:136-150 SKILL.md:173-174 SKILL.md:245-246 SKILL.md:310

False Positive: Certificate File References

Static scanner flagged certificate/key file paths as sensitive. These are template paths in YAML configurations (e.g., /etc/certs/client.pem), not actual certificates.

SKILL.md:358-361

False Positive: Network URL References

Static scanner flagged hardcoded URLs. These are legitimate documentation URLs to Istio, SPIFFE, cert-manager, and NIST - appropriate for a reference skill.

SKILL.md:112-116 SKILL.md:128-140 SKILL.md:329-330

False Positive: Weak Cryptographic Algorithm

Static scanner flagged 'weak crypto' at 8 locations. The skill uses TLS modes ISTIO_MUTUAL, MUTUAL, and SIMPLE which are standard secure configurations - not weak algorithms.

Problemas de riesgo bajo (2)

SKILL.md:225

False Positive: SQLite Database Reference

Static scanner flagged SQLite path. This is SPIRE server's standard datastore configuration - legitimate operational documentation.

SKILL.md:212

False Positive: Hardcoded IP Address

Static scanner flagged bind_address. The 0.0.0.0 is standard SPIRE server configuration to listen on all interfaces - not a security issue.

Auditado por: claude