helm-chart-scaffolding
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the ingestion and processing of external Helm chart manifests, which represents a potential attack surface for indirect instructions.
- Ingestion points: Content is ingested from local chart directories (Chart.yaml, values.yaml, and template files) by the
scripts/validate-chart.shscript and Helm CLI commands. - Boundary markers: None; the skill does not define specific delimiters to isolate external manifest content from agent instructions.
- Capability inventory: High-privilege tools are employed, including
helmfor rendering and dry-run installs,kubectlfor resource inspection, andawsfor repository synchronization. - Sanitization: While the skill promotes linting and schema validation for data structure, it lacks mechanisms to sanitize natural language instructions embedded within the processed manifests.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading chart dependencies from external sources.
- Evidence: The documentation and
Chart.yamltemplates reference fetching subcharts (e.g., PostgreSQL, Redis) from the well-known Bitnami repository (https://charts.bitnami.com/bitnami) via thehelm dependency updatecommand.
Audit Metadata