gitops-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation manifests from the official ArgoCD GitHub repository (
https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml). As ArgoCD is a widely-used and well-known open-source project, these downloads are considered safe and standard for the described workflow. - [EXTERNAL_DOWNLOADS]: The skill downloads the Flux CLI installation script from the official Flux project domain (
https://fluxcd.io/install.sh). This is the documented and trusted method for installing the Flux utility. - [SAFE]: The skill correctly emphasizes security best practices for GitOps, such as using External Secrets or Sealed Secrets to keep sensitive information out of version control and recommending SSO and RBAC for cluster access.
Audit Metadata