upgrading-cluster-version
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands for administrative tasks such as stopping/starting services (
systemctl), replacing binaries (cp), and managing Kubernetes deployments (kubectl,helm). These are standard operations for performing database upgrades in a self-hosted or cloud-managed environment. - [EXTERNAL_DOWNLOADS]: The skill contains a reference to a vendor-owned API (
cockroachlabs.cloud) to retrieve cluster version information. It also utilizes standard Helm chart repositories for Kubernetes upgrades. These interactions are directed toward trusted vendor infrastructure. - [DATA_EXFILTRATION]: While the skill demonstrates how to use an API key for authentication via an environment variable (
$COCKROACH_API_KEY), it does not hardcode credentials or attempt to exfiltrate sensitive data to unauthorized third parties. - [SAFE]: The overall instructions and scripts align with documented best practices for CockroachDB cluster management. The use of elevated privileges (
sudo) is limited to necessary service management and binary replacement steps.
Audit Metadata