gitops-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official Kubernetes manifests and installation scripts from trusted and well-known sources, including the
argoprojGitHub organization (a trusted vendor) and the officialfluxcd.iodomain (a well-known service for CNCF projects). - [COMMAND_EXECUTION]: The instructions include the execution of system commands for cluster management and tool configuration, such as
kubectl,helm, and thefluxCLI. These are standard operations for managing Kubernetes environments. - [PRIVILEGE_ESCALATION]: The Flux CD installation guide includes a command using
sudoto execute a shell script. This is a standard administrative procedure for installing system-wide binaries on Linux systems. - [INDIRECT_PROMPT_INJECTION]: The skill configures Kubernetes controllers to ingest and reconcile state from external Git repositories. While this establishes a data ingestion pipeline, it is the fundamental purpose of a GitOps tool.
- Ingestion points: Git repository URLs defined in
Application(ArgoCD) andGitRepository(Flux) resources inSKILL.mdandreferences/argocd-setup.md. - Boundary markers: None provided in the configuration templates; the system is designed to apply manifests exactly as found in version control.
- Capability inventory: The skill uses
kubectl apply,helm install, andflux bootstrap, which require significant privileges within the Kubernetes cluster. - Sanitization: None; the tools are designed to treat the Git repository as the single source of truth and apply its contents directly.
Audit Metadata