kubernetes

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official tools including kubectl, helm, and k3s. These downloads originate from trusted domains and well-known services: dl.k8s.io, raw.githubusercontent.com/helm, and get.k3s.io. These are standard practices for DevOps tooling.
  • [COMMAND_EXECUTION]: Extensive documentation is provided for kubectl, helm, and etcdctl commands. These commands are necessary for the skill's intended purpose of managing containerized workloads and cluster state.
  • [PRIVILEGE_ESCALATION]: Administrative installation steps in SKILL.md and references/00-overview.md utilize sudo to configure system binaries and bootstrap clusters via kubeadm. This is the expected and legitimate method for configuring Kubernetes infrastructure.
  • [DYNAMIC_EXECUTION]: The helper script scripts/check-updates.py performs network requests to https://dl.k8s.io/release/stable.txt to verify the latest Kubernetes versions and performs local file scanning to ensure skill integrity. This automation is benign and supports skill maintenance.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — kubernetes