helm-chart-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that clone a repository from GitHub (
github.com/alirezarezvani/claude-skills.git). This is documented as the official source for the skill's own components and follows standard installation patterns for development tools. - [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/chart_analyzer.pyandscripts/values_validator.py) designed to perform static analysis on local Helm chart files. These scripts utilize standard libraries (argparse,json,re,pathlib) and do not perform suspicious network operations, credential harvesting, or unauthorized file access. They are intended for developer-led validation tasks. - [COMMAND_EXECUTION]: Slash commands like
/helm:create,/helm:review, and/helm:securitytrigger local shell commands such ashelm lintandhelm template. These are standard Helm CLI operations required for the skill's stated purpose of chart development and security auditing. - [SAFE]: The security auditing logic within
scripts/chart_analyzer.pycorrectly identifies and flags insecure Kubernetes patterns (e.g., privileged containers, missing security contexts, hardcoded secrets in YAML) to help users improve their security posture, rather than exploiting them. - [SAFE]: References to external services like
clawhubfor package management are presented as standard installation options within the DevOps ecosystem.
Audit Metadata