package-k8s-green

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The launcher script green downloads infrastructure libraries from the author's GitHub repositories (github.com/getcolors/k8s.git, github.com/getcolors/green.git, and github.com/getcolors/once.git) when they are not present in the local environment.
  • [REMOTE_CODE_EXECUTION]: The skill executes code from the fetched Clojure libraries to perform Kubernetes cluster lifecycle operations. The root dependency k8s is pinned to a specific Git commit hash (af71a401f31c8d88bb5e60354e6198723f5f2639) to ensure code integrity and prevent execution of unverified updates.
  • [DYNAMIC_EXECUTION]: The green script uses babashka.deps/add-deps to dynamically load external Git dependencies and requiring-resolve to invoke functions from those libraries at runtime.
  • [COMMAND_EXECUTION]: The skill executes system commands for infrastructure management, including kubectl, ansible, and opentofu, through the green script wrapper.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 02:00 PM