helm-chart-scaffolding

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill focuses on providing educational content and templates for Helm chart scaffolding without including any executable malicious code.
  • [EXTERNAL_DOWNLOADS]: The skill references subchart dependencies from Bitnami's official Helm repository, which is a well-known and trusted source for Kubernetes packages.
  • [SAFE]: The scripts/validate-chart.sh script uses standard Helm and shell commands to verify chart integrity locally.
  • [SAFE]: Documentation and templates explicitly encourage security best practices, such as configuring Kubernetes securityContext to restrict container privileges.
  • [INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing of external configuration data via values.yaml. It follows best practices by using structured YAML and template quoting to define clear boundaries for data interpolation.
  • Ingestion points: External configuration provided in values.yaml files (e.g., values.yaml, values-prod.yaml) and templates in the templates/ directory.
  • Boundary markers: Uses structured YAML and Helm/Go templating syntax to separate data from instructions.
  • Capability inventory: Execution of helm install, helm upgrade, and helm lint commands on the local system.
  • Sanitization: Employs Helm templating functions like quote and nindent to handle data formatting safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:45 AM