kubernetes
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns detected. The skill provides extensive documentation on hardening Kubernetes clusters, including Pod Security Standards, workload identity, and secrets management best practices.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided infrastructure requirements, which is a standard functional surface. It mitigates risks through mandatory validation checklists, dry-run procedures, and automated policy scoring (kube-score, checkov).\n
- Ingestion points: Workflow Step 1 and 2 (processing manifest-or-chart-or-cluster-task inputs).\n
- Boundary markers: Present; the AI Self-Check and production checklists establish clear security boundaries and instructions to verify generated output.\n
- Capability inventory: Manifest generation and administrative command execution via kubectl and helm for validation purposes (SKILL.md, Step 4).\n
- Sanitization: Employs dry-runs, server-side diffing, and mandatory linting to ensure all generated artifacts comply with security and architecture policies.
Audit Metadata