use-sealos
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various command-line tools such as
kubectl,docker,curl, andgitto manage cloud resources, build images, and perform health checks. These operations are scoped to the user's Sealos workspace via a restricted kubeconfig. - [SAFE]: Credentials and sensitive configuration are managed via standard Kubernetes secrets (
secretKeyRef) rather than being hardcoded or baked into Docker images. The skill includes explicit instructions never to print secret values to logs. - [SAFE]: The provided scripts (
sealos-api.pyandwait-app.sh) use standard libraries and follow well-defined flows for authentication (OAuth2 device flow) and resource monitoring. - [SAFE]: External resource references for popular application recipes point to official GitHub repositories and Docker Hub images from well-known vendors.
Audit Metadata