helm-chart-development
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard
helmandkubectlcommands for chart development tasks such as scaffolding, linting, rendering, and testing. - [EXTERNAL_DOWNLOADS]: Downloads chart dependencies and references tools from well-known sources including Bitnami (
https://charts.bitnami.com/bitnami) and the official Helm project (helm.sh,github.com/helm). - [EXTERNAL_DOWNLOADS]: Includes CI/CD workflow examples utilizing trusted GitHub Actions like
azure/setup-helmandhelm/chart-testing-action. - [CREDENTIALS_UNSAFE]: Mentions a command example that references the GPG secret keyring path (
~/.gnupg/secring.gpg) for chart signing operations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes local configuration files such as
Chart.yamlandvalues.yaml, which is a standard surface for indirect prompt injection. - Ingestion points: Reads metadata and configuration from
Chart.yamlandvalues.yamlin the local chart directory (SKILL.md). - Boundary markers: None explicitly defined to isolate embedded instructions from data.
- Capability inventory: Uses Bash, Read, Write, and Edit tools to process files and run Helm/Kubernetes commands (SKILL.md).
- Sanitization: Relies on
helm lintandhelm template --validatefor schema and template verification.
Audit Metadata