helm-values-management

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and command-line examples for managing Kubernetes configurations using Helm.
  • [SAFE]: Mentioned external links for Helm documentation, the helm-secrets plugin, and the External Secrets Operator are well-known and reputable community resources.
  • [SAFE]: Example credentials and secrets provided in the documentation (e.g., super-secret-password, api-key-12345) are clearly illustrative examples and do not represent actual hardcoded sensitive data.
  • [SAFE]: Instructions for secret management follow industry best practices, such as using .gitignore for secret files and leveraging tools like sops or Kubernetes ExternalSecret objects.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to ingest and process external Helm values files. While this creates a surface for indirect prompt injection if those files contain malicious instructions, the risk is inherent to the task of processing configuration files and is considered low in this context, especially given that no unsafe prompt interpolation is suggested.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 01:20 PM