atmos-helmfile
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external CLI tools including helmfile for deployment management, aws eks for cluster authentication, and helm for plugin management.
- [EXTERNAL_DOWNLOADS]: Fetches deployment components from remote URIs using the go-getter library. It retrieves resources from vendor repositories such as github.com/cloudposse/helmfiles.
- [REMOTE_CODE_EXECUTION]: Automatically installs declared Helm CLI plugins and executes the logic contained within vendored Helmfile components during deployment operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data from external stack manifests and remote sources to drive its logic. 1. Ingestion points: Stack manifest YAML files and remote component sources fetched via Git, S3, or HTTP. 2. Boundary markers: Relies on YAML structure and Atmos configuration inheritance. 3. Capability inventory: Includes shell command execution, local file writing, and network operations for vendoring. 4. Sanitization: The skill resolves and merges variables from stack manifests before passing them to the Helmfile execution environment.
Audit Metadata