helm-chart-development

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard helm and kubectl commands for chart development tasks such as scaffolding, linting, rendering, and testing.
  • [EXTERNAL_DOWNLOADS]: Downloads chart dependencies and references tools from well-known sources including Bitnami (https://charts.bitnami.com/bitnami) and the official Helm project (helm.sh, github.com/helm).
  • [EXTERNAL_DOWNLOADS]: Includes CI/CD workflow examples utilizing trusted GitHub Actions like azure/setup-helm and helm/chart-testing-action.
  • [CREDENTIALS_UNSAFE]: Mentions a command example that references the GPG secret keyring path (~/.gnupg/secring.gpg) for chart signing operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes local configuration files such as Chart.yaml and values.yaml, which is a standard surface for indirect prompt injection.
  • Ingestion points: Reads metadata and configuration from Chart.yaml and values.yaml in the local chart directory (SKILL.md).
  • Boundary markers: None explicitly defined to isolate embedded instructions from data.
  • Capability inventory: Uses Bash, Read, Write, and Edit tools to process files and run Helm/Kubernetes commands (SKILL.md).
  • Sanitization: Relies on helm lint and helm template --validate for schema and template verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 01:19 PM