netbird-operator
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and apply Kubernetes manifests for
cert-managerdirectly from its official GitHub repository release page. This is a standard deployment method for this well-known infrastructure component.\n- [EXTERNAL_DOWNLOADS]: The installation process involves pulling an OCI-packaged Helm chart from the GitHub Container Registry (ghcr.io/netbirdio/helm-charts/netbird-operator), which is a well-known and trusted service registry.\n- [COMMAND_EXECUTION]: Provides a series ofkubectlandhelmcommands intended to set up namespaces, create secrets for API authentication, and install the operator. These commands are essential for the skill's stated purpose of managing a Kubernetes operator.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns where the operator ingests data through Kubernetes Custom Resources (CRDs).\n - Ingestion points: Kubernetes API server via Custom Resources like
SetupKey,NetworkRouter, andClusterProxydefined inSKILL.md.\n - Boundary markers: Absent in the provided instructions.\n
- Capability inventory: The skill enables networking configuration, secret creation, and Management API interaction via the
kubectlandhelmtoolset.\n - Sanitization: Absent in the descriptive YAML examples.
Audit Metadata