argocd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). ArgoCD’s REQUIRED runtime workflow for this skill involves fetching and rendering Application source content from external Git/Helm/OCI repositories (e.g., spec.source.repoURL/path and Helm chart repos), which can include outsider-authored free-form text (manifests/values/templates) that ArgoCD then renders into LLM-readable YAML/templated text for processing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes commands and Application examples that fetch and apply remote content at runtime (notably kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml and ArgoCD Application repoURL entries like https://github.com/org/repo.git and Helm repo https://charts.bitnami.com/bitnami), which will retrieve external manifests/charts and execute them in the cluster, so these are runtime external dependencies that can execute remote code.