canary-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several shell scripts designed to automate deployment workflows.
references/automated-canary-promotion.mdcontainspromote-canary.shwhich executeskubectlcommands to monitor pod health and triggers a secondary script/scripts/analyze.sh.references/kubernetes-native-canary-deployment.mdcontainscanary-rollout.shwhich useskubectl patchandkubectl set imageto manage traffic weights and deployment versions.- [EXTERNAL_DOWNLOADS]: The
analyze.shscript inreferences/metrics-based-canary-analysis.mdperforms network requests viacurlto a Prometheus API endpoint (http://prometheus:9090/api/v1/query). This is used to retrieve metrics for deployment validation and does not involve downloading executable code or exfiltrating sensitive data.
Audit Metadata