gitops-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and manifests from official and well-known sources.
  • Downloads the ArgoCD installation manifest from the official Argo Project GitHub repository (https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml).
  • Downloads the Flux CD installation script from its official domain (https://fluxcd.io/install.sh).
  • [PRIVILEGE_ESCALATION]: The skill uses administrative privileges for installation.
  • Executes the Flux CD installation script using sudo bash to install the CLI to the system.
  • [COMMAND_EXECUTION]: The skill executes various CLI tools to manage Kubernetes and GitOps resources.
  • Uses kubectl to apply manifests, create namespaces, and retrieve the initial admin password from a cluster secret.
  • Uses flux and argocd CLI tools for cluster bootstrapping and application management.
  • Uses kubeseal for encrypting secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external data.
  • Ingestion points: Ingests Kubernetes manifests, Kustomization files, and Git repository content (SKILL.md).
  • Boundary markers: None explicitly defined for external content ingestion.
  • Capability inventory: Executes subprocesses for kubectl, flux, argocd, and helm across multiple files.
  • Sanitization: None observed for the interpolation of repository URLs or paths into CLI commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 12:59 PM