helm-chart-scaffolding
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill focuses on providing educational content and templates for Helm chart scaffolding without including any executable malicious code.
- [EXTERNAL_DOWNLOADS]: The skill references subchart dependencies from Bitnami's official Helm repository, which is a well-known and trusted source for Kubernetes packages.
- [SAFE]: The
scripts/validate-chart.shscript uses standard Helm and shell commands to verify chart integrity locally. - [SAFE]: Documentation and templates explicitly encourage security best practices, such as configuring Kubernetes
securityContextto restrict container privileges. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing of external configuration data via
values.yaml. It follows best practices by using structured YAML and template quoting to define clear boundaries for data interpolation. - Ingestion points: External configuration provided in
values.yamlfiles (e.g.,values.yaml,values-prod.yaml) and templates in thetemplates/directory. - Boundary markers: Uses structured YAML and Helm/Go templating syntax to separate data from instructions.
- Capability inventory: Execution of
helm install,helm upgrade, andhelm lintcommands on the local system. - Sanitization: Employs Helm templating functions like
quoteandnindentto handle data formatting safely.
Audit Metadata