package-k8s-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher script
greendownloads infrastructure libraries from the author's GitHub repositories (github.com/getcolors/k8s.git,github.com/getcolors/green.git, andgithub.com/getcolors/once.git) when they are not present in the local environment. - [REMOTE_CODE_EXECUTION]: The skill executes code from the fetched Clojure libraries to perform Kubernetes cluster lifecycle operations. The root dependency
k8sis pinned to a specific Git commit hash (af71a401f31c8d88bb5e60354e6198723f5f2639) to ensure code integrity and prevent execution of unverified updates. - [DYNAMIC_EXECUTION]: The
greenscript usesbabashka.deps/add-depsto dynamically load external Git dependencies andrequiring-resolveto invoke functions from those libraries at runtime. - [COMMAND_EXECUTION]: The skill executes system commands for infrastructure management, including
kubectl,ansible, andopentofu, through thegreenscript wrapper.
Audit Metadata