k8s-nextjs-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides standard Kubernetes manifests and troubleshooting commands.
- [COMMAND_EXECUTION]: The skill includes
kubectlcommand templates for creating secrets and managing deployments. These templates use placeholders for sensitive values (e.g., 'TOKEN') and include security best practices, such as mandatory single quotes to prevent unintended shell expansion of special characters like '$'. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a template generator that ingests user-provided subdomains and namespaces.
- Ingestion points: User-supplied values for namespaces, subdomains, and secret keys (SKILL.md).
- Boundary markers: None explicitly defined in the templates.
- Capability inventory: Generation of
kubectlandyamlmanifests. - Sanitization: The skill includes documentation warning the user/agent about shell character expansion issues, though it does not provide code-based sanitization logic.
Audit Metadata