victoriametrics-operator
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an official Helm chart hosted on the GitHub Container Registry (
ghcr.io/victoriametrics/helm-charts). This originates from a well-known and established organization in the observability space. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a reference for generating Kubernetes manifests. It defines the ingestion surface where an agent might interpolate user-provided values into these CRD templates. The documentation includes common patterns and identifies boundary concerns such as selectors, providing a clear schema for safe configuration generation.
- [CREDENTIALS_UNSAFE]: The documentation for the
VMUserandVMAuthCRDs correctly highlights the use of thegeneratePasswordfield. This promotes the use of dynamically generated secrets rather than hardcoded credentials, aligning with secure secret management practices.
Audit Metadata