kubeadm
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and reference material for the
kubeadmtool. The instructions cover standard administrative workflows such as cluster initialization, node joining, and certificate renewal. All content is transparent and educational in nature. - [INDIRECT_PROMPT_INJECTION]: The skill defines a knowledge surface for handling
kubeadmconfigurations and command parameters. While these inputs could theoretically be used for injection if an agent blindly executes user-provided strings, the documentation includes relevant safety warnings (e.g., about the risks of skipping CA verification) and adheres to standard Kubernetes security practices. - [DATA_EXFILTRATION]: The documentation identifies sensitive file paths (e.g.,
/etc/kubernetes/pki,admin.conf) and describes the use of bootstrap tokens and encryption keys. These references are strictly for documentation purposes to assist in legitimate cluster management and do not involve unauthorized data access or exfiltration.
Audit Metadata