# Information Disclosure

> Information Disclosure is an Agent Skill for devops & security published in the kubernetes-sigs/kueue repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Flag information-disclosure patterns — full-object logging, request echoing, credentials in status/annotations, kubeconfig logging, secret-bearing status (CWE-200, CWE-522, CWE-532, CWE-552).

- Skill name: `information-disclosure`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/kubernetes-sigs/kueue/blob/HEAD/cmd/experimental/skills/reviewer/security/information-disclosure/SKILL.md
- Repository: kubernetes-sigs/kueue (2,719 GitHub stars when collected)

## SKILL.md

# Skill: Information Disclosure (CWE-200, CWE-522, CWE-532, CWE-552)

- Full Kubernetes objects logged with `%+v` / `%#v`. Required: `klog.KObj(obj)` plus
  structured key/value pairs.
- Webhook responses, events, or status fields that echo request bodies, stack traces,
  or credential-bearing fields.
- Credentials or tokens persisted in annotations, labels, env vars, or status —
  credentials belong in mounted Secrets.
- kubeconfigs logged, echoed in status, or written with
  `insecure-skip-tls-verify: true`.
- Visibility-API or metrics queries that widen results past the caller's
  namespace/queue.
- Secret-bearing data written to `.status` — status updates are at-least-once, so
  every retry leaks.

---

Source: https://www.openparable.com/skill/devops-security/information-disclosure (OpenParable). Cite the canonical URL above.