kubernetes-specialist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the core workflow, the skill instructs using kubectl to inspect workload logs and pod descriptions (e.g., kubectl logs --previous / kubectl describe pod ...), which at runtime consumes free-text from cluster-controlled objects that outsiders can influence by submitting/creating workloads or causing crashes.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). Multiple embedded commands fetch and immediately execute remote content at runtime (e.g., curl -L https://istio.io/downloadIstio | sh, curl --proto '=https' -sSfL https://run.linkerd.io/install | sh, curl -Ls https://get.submariner.io | bash, kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml, kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.24.0/controller.yaml, kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.20/samples/addons/kiali.yaml, kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.20/samples/addons/jaeger.yaml, and downloading clusterctl from https://github.com/kubernetes-sigs/cluster-api/releases/download/v1.6.0/clusterctl-linux-amd64), so these URLs retrieve remote code/manifests that are executed or applied during runtime.