infisical-kubernetes-operator
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and manifests for a Kubernetes Operator developed by the author organization (infisical). All external resources, including the Helm repository URL (dl.cloudsmith.io/public/infisical/...) and default API endpoints (app.infisical.com), are legitimate vendor-controlled infrastructure.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the operator via Helm from the vendor's official Cloudsmith repository. This is standard installation procedure for the documented tool.
- [COMMAND_EXECUTION]: The skill includes benign setup commands for the Helm CLI (
helm repo add,helm install) to facilitate the installation of the operator. - [CREDENTIALS_UNSAFE]: The skill explicitly advises against hardcoding sensitive information in manifests, instructing users to reference Kubernetes Secrets for credentials instead. It recommends
kubernetesauthentication which utilizes short-lived service account tokens rather than static long-lived credentials. - [DYNAMIC_EXECUTION]: The documentation mentions Go templating for rendering secrets in-cluster. This is a standard feature of the operator for formatting configuration strings (like database URLs) and does not involve untrusted code execution.
Audit Metadata