k8s-manifest-generator
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance and templates for Kubernetes resource creation without any malicious instructions or hidden code. Its primary function is to help users generate standard YAML configurations for Deployments, Services, and other cluster resources.
- [SAFE]: Security best practices are explicitly integrated into the workflow. The templates encourage the use of Pod Security Standards, such as running as a non-root user, dropping all Linux capabilities, and using a read-only root filesystem.
- [SAFE]: Example Secret manifests use clear placeholders (e.g., 'changeme', 'secret-api-key') and are accompanied by explicit warnings not to store sensitive data in plain text. The documentation correctly recommends professional secret management solutions like HashiCorp Vault, Sealed Secrets, or External Secrets Operator.
- [SAFE]: No suspicious network operations or remote code execution patterns were identified. The shell scripts provided in the ConfigMap templates are standard health checks and initialization routines for containerized applications, referencing local endpoints (e.g., localhost). External tools mentioned, such as kube-linter and kube-score, are well-known industry utilities for manifest validation.
Audit Metadata