kubernetes-data-platform
Warn
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded credentials and secrets are present in the setup examples.
- The Spark History Server deployment uses 'minioadmin' for both S3 access and secret keys.
- The Airflow setup command includes a hardcoded PostgreSQL connection string: 'postgresql://airflow:airflow@postgres:5432/airflow'.
- The S3 secret creation command uses the well-known AWS example access key 'AKIAIOSFODNN7EXAMPLE' and its associated secret key.
- [COMMAND_EXECUTION]: The instructions involve executing high-privilege Kubernetes commands.
- The creation of a ClusterRoleBinding using the 'edit' role grants broad permissions to the Spark service account, including the ability to create and delete pods across the namespace.
- The skill provides commands for executing arbitrary code within running pods via 'kubectl exec'.
- [SAFE]: External dependencies and software sources are well-known and trusted.
- The skill utilizes the official Apache Airflow Helm repository ('https://airflow.apache.org').
- Base Docker images utilize official Apache Spark distributions ('apache/spark:3.5.1').
Audit Metadata