building-gitops-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied requirements to generate ArgoCD/Flux manifests and GitOps workflows, creating a surface for indirect prompt injection. While it encourages security best practices like RBAC, it lacks explicit instructions to sanitize user input before it is interpolated into configurations or executed via tools.
- Ingestion points: User requirements for creating GitOps workflows in SKILL.md.
- Boundary markers: No specific delimiters or boundary markers are defined to isolate user-provided data.
- Capability inventory: The skill utilizes file operations (Read, Write, Edit) and shell execution for kubectl and git as specified in the YAML frontmatter.
- Sanitization: No explicit content validation or filtering of user-provided data is documented.
Audit Metadata