kubernetes-security-policies
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and audit Kubernetes manifests (YAML files), which are external data sources. Maliciously crafted manifests could attempt to influence the agent's behavior via comments or metadata.
- Ingestion points: Processes
.yamlfiles related to Kubernetes deployments, Helm charts, and cluster configurations. - Capability inventory: Uses
kubectland security scanning tools to evaluate and apply policies. - Boundary markers: None present in the instructions.
- Sanitization: No explicit sanitization or validation of manifest content is described.
- [EXTERNAL_DOWNLOADS]: Fetches installation manifests for established security tools from their respective official repositories.
- Downloads configuration for OPA Gatekeeper from the open-policy-agent GitHub repository.
- Fetches Kyverno installation manifests from the kyverno GitHub releases.
- Downloads kube-bench job definitions from the aquasecurity GitHub repository.
- Fetches Sealed Secrets controller configuration from the bitnami-labs GitHub repository.
Audit Metadata