gitops-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and manifests from official and well-known sources.
- Downloads the ArgoCD installation manifest from the official Argo Project GitHub repository (https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml).
- Downloads the Flux CD installation script from its official domain (https://fluxcd.io/install.sh).
- [PRIVILEGE_ESCALATION]: The skill uses administrative privileges for installation.
- Executes the Flux CD installation script using
sudo bashto install the CLI to the system. - [COMMAND_EXECUTION]: The skill executes various CLI tools to manage Kubernetes and GitOps resources.
- Uses
kubectlto apply manifests, create namespaces, and retrieve the initial admin password from a cluster secret. - Uses
fluxandargocdCLI tools for cluster bootstrapping and application management. - Uses
kubesealfor encrypting secrets. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external data.
- Ingestion points: Ingests Kubernetes manifests, Kustomization files, and Git repository content (SKILL.md).
- Boundary markers: None explicitly defined for external content ingestion.
- Capability inventory: Executes subprocesses for
kubectl,flux,argocd, andhelmacross multiple files. - Sanitization: None observed for the interpolation of repository URLs or paths into CLI commands.
Audit Metadata