gitops-workflow

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches deployment manifests from the official Argo Project GitHub repository and an installation script from the official Flux CD domain. These are well-known and trusted sources in the cloud-native ecosystem.- [REMOTE_CODE_EXECUTION]: An installation command for the Flux CLI pipe-downloads a script from fluxcd.io directly into a shell. While this is a common remote execution pattern for installers, the source is a recognized official domain.- [COMMAND_EXECUTION]: The skill utilizes system-level commands including sudo for software installation and kubectl for cluster resource management, which are necessary for the skill's stated infrastructure automation purpose.- [CREDENTIALS_UNSAFE]: Configuration templates for GitHub SSO and repository access use environment variable placeholders (e.g., $GITHUB_CLIENT_ID) or generic labels, following safe practice for credential management in shared documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 11:58 PM
Security Audit — agent-trust-hub — gitops-workflow