nim-operator-uninstall
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes destructive commands such as
helm uninstallandkubectl deleteto remove operator releases, custom resources, and namespaces. These operations are the primary intended function of the skill and are secured by instructions requiring the agent to summarize impacts and obtain user approval before execution. - [REMOTE_CODE_EXECUTION]: Support for managing remote Kubernetes clusters via SSH is provided. The instructions emphasize transparency, requiring the agent to display all commands and wait for explicit approval before running them on the remote host.
- [PROMPT_INJECTION]: The skill creates an indirect prompt injection surface by ingesting and processing output from Kubernetes and Helm commands which could contain untrusted data from the cluster environment.
- Ingestion points: Output from
kubectl get,kubectl describe, andhelm statuscommands inSKILL.mdandscripts/validate-nim-operator-uninstall.sh. - Boundary markers: No explicit delimiter markers are used for command output, although the skill mandates human-in-the-loop confirmation for any subsequent actions.
- Capability inventory: High-privilege destructive capabilities including
helm uninstallandkubectl delete(SKILL.md). - Sanitization: No evidence of automated data sanitization or validation before processing command outputs.
Audit Metadata