plugin-kubernetes
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation directs users to install the
@diagrams-js/plugin-kubernetespackage from the NPM registry. This package is part of the vendor's official ecosystem and is consistent with the skill's stated purpose.- [DATA_EXFILTRATION]: The skill identifies and processes KubernetesSecretresources. While these resources are handled for diagramming purposes, users should ensure manifests are sanitized of actual credentials to avoid accidental exposure of sensitive metadata within the diagramming context.- [PROMPT_INJECTION]: The skill processes external Kubernetes YAML files, which serves as an ingestion point for untrusted data. - Ingestion points: Kubernetes YAML content is imported using the
diagram.import()function as shown inSKILL.md. - Boundary markers: There are no specific instructions or delimiters mentioned to prevent the agent from interpreting instructions embedded within the YAML data.
- Capability inventory: The analysis found the skill is focused on SVG rendering and metadata assignment; it does not possess capabilities for arbitrary command execution or network requests.
- Sanitization: No explicit validation or sanitization procedures for the input YAML manifests are described.
Audit Metadata