k8s-workloads
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The backup reference guide includes a script that downloads the Bun runtime installer from its official domain 'https://bun.sh/install' and executes it via bash. This is a standard installation method for the runtime from a well-known service.
- [EXTERNAL_DOWNLOADS]: The installation process configures and downloads tools from official package repositories for Kopia and PostgreSQL, including their respective signing keys for secure installation.
- [COMMAND_EXECUTION]: The skill provides shell command patterns within Kubernetes manifest examples to run database migrations, copy scripts to temporary directories, and execute backup workflows using Kopia and pg_dump.
- [CREDENTIALS_UNSAFE]: The documentation includes robust advice on managing sensitive credentials using Kubernetes Secrets and environment variables, specifically warning against passing secrets via command-line flags or committing them to version control.
Audit Metadata