ark-setup-cluster
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Helm charts from a McKinsey-associated JFrog registry (
mckinsey-ark-helm.jfrog.io). This is a standard vendor-controlled repository for distributing software artifacts and is considered safe within the context of the skill's purpose. - [COMMAND_EXECUTION]: The skill executes shell commands to manage local Kubernetes clusters (
kind,kubectl) and build the project's own CLI tool from source (npm install,npm run build). These actions are local to the user's environment and necessary for the installation process. - [DATA_EXPOSURE]: The skill modifies the
~/.kube/configfile to update cluster connection details. While this file contains sensitive credentials, the modification is a standard part of the Kubernetes cluster setup and is intended to enable the user to access the newly created cluster.
Audit Metadata