gitops-knowledge
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed instructions for generating and validating Flux CD manifests using standard CLI tools like flux and kustomize. It includes local schema verification steps to ensure manifests are correct before deployment.
- [SAFE]: The skill promotes advanced security features such as OCI artifact signing with Cosign, inter-controller mTLS via SPIFFE, and multi-tenant isolation using ServiceAccount impersonation.
- [SAFE]: All external URLs and dependencies reference official Flux CD repositories or well-known container registries. There are no signs of obfuscation, hardcoded secrets, or unauthorized data access.
- [SAFE]: The documented MCP server integration includes security considerations like read-only modes and automatic masking of sensitive Secret values.
Audit Metadata