helm
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a standard installation method for Linux that involves fetching and executing a shell script from the official Helm project's GitHub repository using
curl | bashinreferences/install-and-setup.md. - [EXTERNAL_DOWNLOADS]: Recommends the installation of several community-maintained plugins and tools from external GitHub repositories, including the
asdf-helmplugin,helm-diff, andhelm-secrets. - [COMMAND_EXECUTION]: The skill involves extensive use of
helmandkubectlcommands to manage and inspect Kubernetes cluster resources, including release installation, upgrades, and history tracking. - [COMMAND_EXECUTION]: Includes commands requiring administrative privileges via
sudofor system-level tasks such as adding repository signing keys, installing packages through the system package manager, and setting up shell completion scripts in protected system directories. - [PROMPT_INJECTION]: The skill processes Helm charts and templates (e.g.,
NOTES.txtand manifest templates) that ingest external configuration values. This creates a surface for indirect prompt injection where malicious instructions embedded in a chart's data could potentially influence the agent's behavior. - Ingestion points:
Chart.yaml,values.yaml, and template files located in thetemplates/directory of a chart as described inreferences/chart-authoring.md. - Boundary markers: The skill does not explicitly define delimiters to isolate processed template content from the rest of the agent's context.
- Capability inventory: The skill has broad capabilities for executing shell commands via
helmandkubectlacross multiple reference files. - Sanitization: No specific sanitization or validation of external chart content is mandated; the skill relies on Helm's native Go template rendering engine.
Audit Metadata