kesavanaswin/CSPM ? reverse-engineered prompt

Build me a lightweight container security posture management tool for Docker and Kubernetes that I can run locally in Python.

I want it to take in three kinds of data, container config, vulnerability scan results, and runtime event telemetry, then analyze them together to spot bad settings and suspicious behavior. It should calculate one overall risk score per container, label it something like low, medium, high, or critical, and show clear reasons why. If something is critical, it should block it in a simulated admission control step and generate an alert. For high or critical findings, also create a Slack style webhook payload, but keep everything self contained with no real external services or database.

Please include a simple CLI and a small dashboard I can open in the browser, plus sample JSON data and a YAML policy file so I can test it right away. If useful, look up current docs online for any library details.