helm-chart-builder

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that clone a repository from GitHub (github.com/alirezarezvani/claude-skills.git). This is documented as the official source for the skill's own components and follows standard installation patterns for development tools.
  • [COMMAND_EXECUTION]: The skill includes Python scripts (scripts/chart_analyzer.py and scripts/values_validator.py) designed to perform static analysis on local Helm chart files. These scripts utilize standard libraries (argparse, json, re, pathlib) and do not perform suspicious network operations, credential harvesting, or unauthorized file access. They are intended for developer-led validation tasks.
  • [COMMAND_EXECUTION]: Slash commands like /helm:create, /helm:review, and /helm:security trigger local shell commands such as helm lint and helm template. These are standard Helm CLI operations required for the skill's stated purpose of chart development and security auditing.
  • [SAFE]: The security auditing logic within scripts/chart_analyzer.py correctly identifies and flags insecure Kubernetes patterns (e.g., privileged containers, missing security contexts, hardcoded secrets in YAML) to help users improve their security posture, rather than exploiting them.
  • [SAFE]: References to external services like clawhub for package management are presented as standard installation options within the DevOps ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 02:32 PM
Security Audit — agent-trust-hub — helm-chart-builder