kubernetes
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate administrative toolset for Kubernetes cluster management. It utilizes standard command-line interfaces (kubectl, oc, cloud provider CLIs) to perform operations. The included shell scripts are transparent and perform documented tasks like health monitoring and security auditing. No evidence of prompt injection, data exfiltration, or malicious persistence was found.
- [COMMAND_EXECUTION]: The skill provides several shell scripts in the
scripts/directory for cluster operations. These scripts are used for node maintenance, health checks, and security audits. They follow standard practices such as usingjqfor JSON parsing and quoting variables to prevent command injection. All commands are aligned with the stated purpose of managing Kubernetes environments. - [SAFE]: The manifest generation script (
scripts/generate-manifest.sh) includes placeholders for credentials (e.g.,your-api-key-hereandpostgresql://user:pass@host:5432/db). These are clearly marked as placeholders to be replaced by the user and do not constitute a credential exposure finding.
Audit Metadata