Aguara Watch

infrastructure-monitoring

skills-sh:aj-geddes_useful-ai-prompts__infrastructure-monitoring

View source
B
84/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

84/100

MEDIUM 2

Findings (2)

MEDIUM
Kubernetes service discovery
L77

Detects Kubernetes internal service URLs and secret paths

/var/run/secrets/kubernetes.io
FIX

Validate and sanitize all user-provided URLs before making server-side requests. Resolve DNS and verify the IP is not in a private range before connecting.

FP?

Likely FP if the URL fetch is for a well-known public API endpoint that is hardcoded (not user-controlled) in the tool configuration.

MEDIUM
Kubernetes service discovery
L78

Detects Kubernetes internal service URLs and secret paths

/var/run/secrets/kubernetes.io
FIX

Validate and sanitize all user-provided URLs before making server-side requests. Resolve DNS and verify the IP is not in a private range before connecting.

FP?

Likely FP if the URL fetch is for a well-known public API endpoint that is hardcoded (not user-controlled) in the tool configuration.