kubernetes-ops
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive capabilities to manage Kubernetes clusters through the
kubectlCLI, including resource creation, modification, deletion, and interactive shell access to containers.\n SKILL.mddocuments powerful commands such askubectl exec,kubectl edit,kubectl apply, andkubectl port-forward.\n- Automated utility scripts like
cluster-health-check.sh,namespace-cleanup.sh, andpod-debug.shfacilitate multi-step cluster operations.\n- [CREDENTIALS_UNSAFE]: The documentation and resource templates contain example credentials used for illustrative purposes.\n SKILL.mddefines a KubernetesSecrettemplate with generic values likeuser:passandsecret-key-value.\nreferences/best-practices.mdincludes a configuration example usingDATABASE_PASSWORD: "secret123".\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the Kubernetes cluster environment, which could be influenced by external actors.\n- Ingestion points: The agent is instructed to read pod logs and cluster events using
kubectl logsandkubectl get eventsinscripts/pod-debug.sh,scripts/cluster-health-check.sh, and the troubleshooting guide.\n - Boundary markers: There are no specific delimiters or instructions to treat the output of logs or events as untrusted data.\n
- Capability inventory: The skill possesses broad administrative capabilities, including the ability to execute code in containers and modify cluster resources across scripts like
namespace-cleanup.sh.\n - Sanitization: External data from logs and events is processed without sanitization or validation against unexpected instructions.
Audit Metadata