argocd-helm
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation manifests from the official ArgoCD repository on GitHub. This is a standard and expected procedure for setting up the ArgoCD service within a Kubernetes cluster.
- [COMMAND_EXECUTION]: Provides documentation and examples for using standard DevOps CLI tools including
kubectl,helm, andargocd. These commands are used for cluster management, deployment synchronization, and troubleshooting as part of the skill's primary function. - [DATA_EXFILTRATION]: Contains instructions for managing repository access which involve referencing standard credential paths such as SSH private keys (
~/.ssh/id_ed25519). In the context of the Principal GitOps Engineer role, this represents legitimate configuration of private repository access rather than unauthorized exfiltration. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data through configuration templates and manifests.
- Ingestion points: Helm
values.yamlfiles and ArgoCDApplicationorApplicationSetmanifests referenced inSKILL.md. - Boundary markers: None are present in the provided templates to isolate embedded instructions in configuration values.
- Capability inventory: Significant cluster management capabilities including manifest application, secret retrieval, and network port-forwarding via
kubectlandargocdCLIs. - Sanitization: Relies on standard template functions such as
quoteandtoYamlwithout additional specific input validation logic.
Audit Metadata