feat: model serving + GPU cluster security skills

[msaad00]

Summary

Two new security benchmark skills filling critical gaps in AI infrastructure security — no CIS benchmark exists for either domain today.

model-serving-security (16 checks, 31 tests)

Audits model deployment infrastructure: API gateways, Kubernetes serving pods, cloud-native endpoints.

Domain	Checks	Key Controls
Auth & RBAC	3	Endpoint auth required, no hardcoded secrets, role-based access
Abuse Prevention	2	Rate limiting, input size/token limits
Data Egress	3	Output filtering, memorization guard, PII redaction in logs
Container Runtime	3	No privileged, read-only rootfs, non-root user
TLS & Network	2	TLS enforced, no public endpoints
Safety Layers	3	Prompt injection guard, content safety, model version pinning

Mapped to: MITRE ATLAS (7 techniques), NIST CSF 2.0, OWASP LLM Top 10

gpu-cluster-security (13 checks, 31 tests)

Audits GPU compute clusters: Kubernetes, Docker, bare-metal.

Domain	Checks	Key Controls
Runtime Isolation	3	No privileged GPU pods, device plugin (not /dev mounts), no host IPC
Driver & CUDA	2	Known CVE driver check (6 versions), CUDA >= 12.2
Network	2	InfiniBand tenant segmentation, NetworkPolicy on GPU namespaces
Storage	2	/dev/shm size limits, model weight encryption at rest
Tenant Isolation	2	Namespace per tenant, GPU resource quotas
Observability	2	DCGM monitoring, GPU audit logging

Mapped to: MITRE ATT&CK (7 techniques), NIST CSF 2.0, CIS Controls v8

Both skills include

• SKILL.md with Anthropic-spec frontmatter + Mermaid diagrams
• Security guardrails (read-only, no API calls, safe for production)
• Human-in-the-loop policy: automated assessment, human required for remediation
• JSON/console output with CI-friendly exit codes
• Full test suites (62 tests total)

Also includes

• CI fix: PYTHONPATH + testpaths override for skill-level pytest
• CI jobs for both new test suites
• README + CLAUDE.md updated

Test plan

• model-serving-security: 31 tests passing
• gpu-cluster-security: 31 tests passing
• ruff check + format passing
• CI workflow includes both new test jobs