ArgocdImageUpdater
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Argo Project Helm repository (
https://argoproj.github.io/argo-helm) for the ArgoCD Image Updater chart. This is a well-known and established source for Kubernetes ecosystem tools. - [COMMAND_EXECUTION]: The workflows utilize standard administrative command-line tools for environment management:
kubectlis used to inspect resource status, diagnose health issues, and verify Custom Resource Definitions (CRDs) within the Kubernetes cluster.gitcommands are provided for managing configuration updates and pushing changes to the values repository.yamllintandpre-commitare recommended for validating configuration syntax and maintaining code quality.- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface area for processing external cluster data and configuration files.
- Ingestion points: The agent reads cluster state through
kubectloutput and processes user-provided Helmvalues.yamlfiles. - Boundary markers: The instructions do not define specific delimiters for separating configuration data from agent instructions.
- Capability inventory: The skill has capabilities to interact with the Kubernetes API via
kubectland update remote repositories viagit. - Sanitization: The workflow relies on external validation tools (
yamllint) to ensure data integrity before synchronization.
Audit Metadata