deployment
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains multiple examples of
kubectlcommands used to manage cluster resources, includingapply,delete,scale, androlloutoperations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon Kubernetes manifests and configuration changes, which creates a vulnerability surface if the agent is instructed to process data from untrusted external sources.
- Ingestion points: Processes Kubernetes resource definitions (YAML) and configuration updates (images, environment variables) via
kubectl apply,kubectl patch, andkubectl set. - Boundary markers: The instructions do not provide specific delimiters or warnings to ignore potentially malicious instructions embedded within user-provided manifests or documentation.
- Capability inventory: Extensive cluster management capabilities including resource creation, deletion, and modification via the
kubectlCLI. - Sanitization: No validation or sanitization logic is suggested for the Kubernetes manifests or container image names before they are applied to the cluster.
Audit Metadata