# Webhook Safety Regressions

> Webhook Safety Regressions is an Agent Skill for devops & security published in the kubernetes-sigs/kueue repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Flag webhook safety regressions — loosened failurePolicy, shortened timeoutSeconds, TLS bypass paths, non-idempotent mutating webhooks.

- Skill name: `webhook-safety-regressions`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/kubernetes-sigs/kueue/blob/HEAD/cmd/experimental/skills/reviewer/security/webhook-safety-regressions/SKILL.md
- Repository: kubernetes-sigs/kueue (2,719 GitHub stars when collected)

## SKILL.md

# Skill: Webhook Safety Regressions

- Validating/mutating webhook changes that loosen `failurePolicy` to `Ignore`,
  shorten `timeoutSeconds` below the existing default without justification, or add a
  path that bypasses TLS verification.
- Non-idempotent mutating webhooks — both a correctness and a security risk under
  admission retry storms.

---

Source: https://www.openparable.com/skill/devops-security/webhook-safety-regressions (OpenParable). Cite the canonical URL above.