k8s-service-path
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes data from external sources (Kubernetes cluster resources).
- Ingestion points: Data is ingested via resources_list, resources_get, and pods_list_in_namespace tools as described in SKILL.md.
- Boundary markers: The instructions do not define clear boundaries or provide guidance to the agent to disregard potential instructions embedded in Kubernetes resource metadata, annotations, or labels.
- Capability inventory: The skill requires the kubectl binary and uses environment variables (K8S_MCP_CMD, K8S_KUBECONFIG) to interact with the cluster environment.
- Sanitization: There is no evidence of sanitization or structural validation to prevent instructions found within cluster data from influencing agent behavior.
Audit Metadata