k8s-manifests
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading official command-line utilities (kubectl, eksctl) from trusted domains including dl.k8s.io and GitHub. These are standard procedures for setting up a Kubernetes development environment.
- [COMMAND_EXECUTION]: The documentation includes various CLI commands for Kubernetes (kubectl), OpenShift (oc), and cloud-specific tools (aws eks, gcloud container, az aks, rosa). These are provided for legitimate cluster management and resource provisioning tasks.
- [CREDENTIALS_UNSAFE]: While the skill manages Kubernetes Secrets and cloud credentials, it uses variable placeholders (e.g., ${DATABASE_URL}, ${WEBHOOK_SECRET}) and follows standard best practices for secret management, such as using external secret stores (Vault, AWS Secrets Manager) and avoiding hardcoded credentials.
Audit Metadata