agent-k8s-harden-check · PyPI
Read-only checker for Kubernetes AI-agent workloads: flags missing gVisor/Kata runtime class, token automount, root or privileged containers, host namespaces, missing limits and missing metadata/RFC1918 egress NetworkPolicy.