zitadel-helm

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides guidance for a legitimate deployment scenario of the ZITADEL open-source project.
  • [SAFE]: Configuration examples demonstrate secure secret management practices by utilizing the Kubernetes valuesFrom pattern to reference sensitive data (passwords, master keys) from existing secrets rather than hardcoding them in plaintext.
  • [SAFE]: The instructions for generating the ZITADEL masterkey use a standard, secure local command (tr -dc A-Za-z0-9 </dev/urandom | head -c 32) that does not involve untrusted remote code or exfiltration.
  • [SAFE]: External references point to ArtifactHub, which is a well-known service for hosting Helm charts.
  • [SAFE]: The included example for bootstrapping a FirstInstance uses a clearly labeled default password ('Admin123!') in a documentation context, which is common for initial configuration templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 07:29 PM