vector-helm
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to add the official Vector Helm repository (
https://helm.vector.dev) and install charts fromoci://ghcr.io/vectordotdev/helm-charts/vector. These are the authoritative and well-known sources for the Vector project. - [CREDENTIALS_UNSAFE]: The skill includes examples for configuring secrets (e.g.,
datadog_api_key,aws_access_key_id). These use standard placeholders like 'your-api-key' or 'AKIA...' and correctly instruct the user to reference them via environment variables from Kubernetes secrets, which is a secure practice. - [COMMAND_EXECUTION]: The skill uses standard Kubernetes management commands (
helm install,helm upgrade,helm repo add) necessary for its primary purpose of deploying software. - [PRIVILEGE_ESCALATION]: The configuration documentation mentions
rbac.create: trueand hostPath mounts (/var/log,/proc, etc.). While these grant significant permissions, they are standard and necessary for a logging agent (DaemonSet) to function correctly on Kubernetes.
Audit Metadata