helm-chart-scaffolding
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and scaffolding tool for Kubernetes Helm charts. All code examples and scripts are standard for DevOps workflows.
- [COMMAND_EXECUTION]: The skill includes standard Helm, kubectl, and AWS CLI commands for chart management, testing, and deployment. These commands are part of the intended instructional purpose and do not perform unauthorized or hidden actions.
- [EXTERNAL_DOWNLOADS]: References official Bitnami Helm charts, Docker Hub registries, and JSON schema registries. These are well-known, trusted sources for infrastructure configuration and documentation.
- [CREDENTIALS_UNSAFE]: Includes common placeholder credentials such as 'changeme' and 'myapp' in template files. These are clearly marked as values to be overridden and do not represent a leak of actual secrets.
- [DYNAMIC_EXECUTION]: The provided validation script (
scripts/validate-chart.sh) uses standard shell utilities (helm, grep, awk, jq) to audit local chart files. It does not ingest or execute untrusted remote code.
Audit Metadata