container-kubernetes-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive educational resource for Kubernetes configuration. It provides best-practice templates for health probes, resource limits, autoscaling, and graceful shutdown.
- [CREDENTIALS_SAFE]: The instructions explicitly warn against security anti-patterns such as baking secrets into container images or storing them in plain text within ConfigMaps. It correctly recommends using Kubernetes Secrets with volume mounts for sensitive data.
- [PRIVILEGE_ESCALATION]: The skill promotes the principle of least privilege by providing examples of scoped RBAC Roles and ServiceAccounts. It specifically highlights the dangers of using the
cluster-adminrole or wildcard permissions. - [DYNAMIC_EXECUTION]: The provided TypeScript and YAML snippets are standard implementation examples for health checks and resource management. They do not contain any unsafe dynamic code generation or execution of untrusted input.
Audit Metadata