argocd-expert
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download ArgoCD installation manifests directly from the official Argo Project (argoproj) GitHub repository. This is the standard, trusted source for the software.
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows that ingest data from external Git repositories to manage Kubernetes resources. While this creates a surface for potential injection via malicious manifests, the skill explicitly recommends mitigation strategies such as implementing AppProjects for isolation and strict RBAC policies.
- [COMMAND_EXECUTION]: The instructions utilize standard administrative tools like
kubectlandargocdto manage cluster state and applications. These operations are within the scope of the skill's defined DevOps purpose and follow industry best practices for declarative infrastructure management.
Audit Metadata