gitops-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches deployment manifests from the official Argo Project GitHub repository and an installation script from the official Flux CD domain. These are well-known and trusted sources in the cloud-native ecosystem.- [REMOTE_CODE_EXECUTION]: An installation command for the Flux CLI pipe-downloads a script from fluxcd.io directly into a shell. While this is a common remote execution pattern for installers, the source is a recognized official domain.- [COMMAND_EXECUTION]: The skill utilizes system-level commands including
sudofor software installation andkubectlfor cluster resource management, which are necessary for the skill's stated infrastructure automation purpose.- [CREDENTIALS_UNSAFE]: Configuration templates for GitHub SSO and repository access use environment variable placeholders (e.g., $GITHUB_CLIENT_ID) or generic labels, following safe practice for credential management in shared documentation.
Audit Metadata