helm-values-management
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and command-line examples for managing Kubernetes configurations using Helm.
- [SAFE]: Mentioned external links for Helm documentation, the
helm-secretsplugin, and theExternal Secrets Operatorare well-known and reputable community resources. - [SAFE]: Example credentials and secrets provided in the documentation (e.g.,
super-secret-password,api-key-12345) are clearly illustrative examples and do not represent actual hardcoded sensitive data. - [SAFE]: Instructions for secret management follow industry best practices, such as using
.gitignorefor secret files and leveraging tools likesopsor KubernetesExternalSecretobjects. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to ingest and process external Helm values files. While this creates a surface for indirect prompt injection if those files contain malicious instructions, the risk is inherent to the task of processing configuration files and is considered low in this context, especially given that no unsafe prompt interpolation is suggested.
Audit Metadata