argocd-helm

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches installation manifests from the official ArgoCD repository on GitHub. This is a standard and expected procedure for setting up the ArgoCD service within a Kubernetes cluster.
  • [COMMAND_EXECUTION]: Provides documentation and examples for using standard DevOps CLI tools including kubectl, helm, and argocd. These commands are used for cluster management, deployment synchronization, and troubleshooting as part of the skill's primary function.
  • [DATA_EXFILTRATION]: Contains instructions for managing repository access which involve referencing standard credential paths such as SSH private keys (~/.ssh/id_ed25519). In the context of the Principal GitOps Engineer role, this represents legitimate configuration of private repository access rather than unauthorized exfiltration.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data through configuration templates and manifests.
  • Ingestion points: Helm values.yaml files and ArgoCD Application or ApplicationSet manifests referenced in SKILL.md.
  • Boundary markers: None are present in the provided templates to isolate embedded instructions in configuration values.
  • Capability inventory: Significant cluster management capabilities including manifest application, secret retrieval, and network port-forwarding via kubectl and argocd CLIs.
  • Sanitization: Relies on standard template functions such as quote and toYaml without additional specific input validation logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 06:38 AM