sealos-deploy
Fail
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands using
docker,kubectl, andgh. These are necessary for building images and managing Kubernetes resources on Sealos Cloud. - [EXTERNAL_DOWNLOADS]: Fetches deployment templates from remote sources and prompts the user to download required CLI tools if they are missing from the system.
- [DATA_EXFILTRATION]: Reads the user's
~/.sealos/kubeconfigand transmits it to the Sealos Template API. This is the legitimate authorization process required for programmatic deployment to the platform. - [INDIRECT_PROMPT_INJECTION]: Analyzes untrusted data from the repository being deployed, including
README.mdandpackage.jsonfiles, to automatically determine configuration parameters. The skill mitigates risks through quality gates and user confirmation checkpoints. - [SAFE]: The phishing URLs identified by automated scans are located in unit test fixtures as mock data and are not accessed by the skill's runtime logic.
- [SAFE]: The 'concealment' detection is a false positive; instructions to avoid printing deployment arguments are a security measure intended to prevent the logging of sensitive user credentials.
Recommendations
- Contains 3 malicious URL(s) - DO NOT USE
Audit Metadata