Get host access from a misconfigured container.
Guides container breakout attempts to obtain access to the host system.
When to use it
Use when operating inside a Docker container, LXC, or Kubernetes pod and seeking access to the host.
Give it a container escape request; it checks the container's conditions and follows a matching path to attempt host access.
The service-account escape path reads the mounted token file and uses the token as bearer authentication for Kubernetes API requests.
This skill
$d/release_agent
Overwrites the cgroup release handler (irreversible)
Kubernetes
Creates a privileged Kubernetes pod
escape-pod
Starts a host-access Kubernetes pod