skills/ma1orek/replay/gitops-workflow/Gen Agent Trust Hub

gitops-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads official Kubernetes manifests and installation scripts from trusted and well-known sources, including the argoproj GitHub organization (a trusted vendor) and the official fluxcd.io domain (a well-known service for CNCF projects).
  • [COMMAND_EXECUTION]: The instructions include the execution of system commands for cluster management and tool configuration, such as kubectl, helm, and the flux CLI. These are standard operations for managing Kubernetes environments.
  • [PRIVILEGE_ESCALATION]: The Flux CD installation guide includes a command using sudo to execute a shell script. This is a standard administrative procedure for installing system-wide binaries on Linux systems.
  • [INDIRECT_PROMPT_INJECTION]: The skill configures Kubernetes controllers to ingest and reconcile state from external Git repositories. While this establishes a data ingestion pipeline, it is the fundamental purpose of a GitOps tool.
  • Ingestion points: Git repository URLs defined in Application (ArgoCD) and GitRepository (Flux) resources in SKILL.md and references/argocd-setup.md.
  • Boundary markers: None provided in the configuration templates; the system is designed to apply manifests exactly as found in version control.
  • Capability inventory: The skill uses kubectl apply, helm install, and flux bootstrap, which require significant privileges within the Kubernetes cluster.
  • Sanitization: None; the tools are designed to treat the Git repository as the single source of truth and apply its contents directly.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:53 AM