argocd-gitops
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install ArgoCD using manifests from the official argoproj GitHub repository. This is a standard installation procedure for a well-known project and is considered safe.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages Kubernetes cluster state based on external Git repository content, which creates a potential surface for indirect injection if those repositories are compromised.\n
- Ingestion points: External Git repositories specified in
repoURLfields in SKILL.md and references/argocd-patterns.md.\n - Boundary markers: Uses structured Kubernetes and ArgoCD Application manifests.\n
- Capability inventory: The skill can manage all cluster resources and execute container-based scripts via sync hooks.\n
- Sanitization: Relies on native Kubernetes RBAC and ArgoCD validation mechanisms.
Audit Metadata