k8s-operations
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several automation scripts and playbooks that execute shell commands on the local machine and remote servers.
- Ansible playbooks in
references/best-practices.mduseapt,service, andcommandmodules to manage packages and system services. - The Bun deployment script in
references/deployment-automation.mduses shell execution ($) to runkubectlanddockercommands for building and deploying container images. - NGINX Ingress configuration examples include snippets for rate limiting and caching logic.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several management tools from well-known and trusted sources.
- Instructions include using Homebrew to install
ansible,sshuttle,k9s, andkubectxon macOS. - The GitHub Actions workflow in
references/deployment-automation.mdfetches actions from trusted organizations includingactions,azure,oven-sh, anddocker. - Recommends the installation of
krewand several community plugins forkubectl(neat,node-shell,popeye,tree,ingress-nginx). - [INDIRECT_PROMPT_INJECTION]: The skill includes an automation script and CI/CD workflow that process external data, presenting a potential injection surface.
- Ingestion points: The Bun script reads live Kubernetes Deployment manifests via
kubectl get, and the GitHub Actions workflow accepts manual inputs viaworkflow_dispatch(references/deployment-automation.md). - Boundary markers: The skill explicitly includes security warnings advising users to assign GHA inputs to environment variables rather than direct interpolation to prevent expression injection.
- Capability inventory: The automation scripts have the capability to write files to disk, execute shell commands, and interact with the Kubernetes API and Docker daemon.
- Sanitization: The deployment script uses a YAML parser (
parseDocument) for programmatic patching rather than text-based manipulation, reducing the risk of schema confusion.
Audit Metadata