atlas-operator
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the prerequisite 'atlas' skill from the official vendor website (atlasgo.io) if it is not already present. This is a legitimate dependency for the operator's functionality.
- [CREDENTIALS_SAFE]: The instructions consistently emphasize the use of Kubernetes Secrets for sensitive data. It explicitly warns users against writing passwords or tokens into manifests or conversation history, directing them to use 'urlFrom' and 'tokenFrom' fields instead.
- [DYNAMIC_EXECUTION]: The documentation describes the 'external_schema' feature which can execute external programs. The skill includes a clear security disclaimer stating that this feature should only be enabled (via 'allowCustomConfig=true') when the authors of the Kubernetes resources are trusted.
- [SAFE]: All external URLs and resources point to the official 'atlasgo.io' domain or the 'ariga' organization on GitHub/GHCR, which are the verified authors of the tool.
Audit Metadata