nvcf-self-managed-prerequisite

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard administrative commands including helm install, kubectl apply, and az aks update to configure Kubernetes cluster resources. It also uses make to trigger cluster registration tasks.
  • [EXTERNAL_DOWNLOADS]: Fetches Helm charts and configuration from well-known and reputable sources, including ghcr.io (GitHub Container Registry) for the KAI Scheduler and official Kubernetes-CSI repositories on GitHub for the SMB driver. These are standard distributions for cloud-native infrastructure.
  • [PROMPT_INJECTION]: The skill contains templates for shell commands where user-provided inputs (such as cluster names, regions, or URLs) are interpolated. This represents a potential indirect prompt injection surface typical of shell-based automation tools, but is restricted to the intended administrative context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 08:00 AM
Security Audit — agent-trust-hub — nvcf-self-managed-prerequisite