deploy-k8s-explorer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and mitigates the risk of ingesting untrusted data from Kubernetes logs and metadata which could contain adversarial instructions.
- Ingestion points: Command outputs from
kubectl logs,kubectl get pods, andobserve datastream vieware processed in Phase 5 and Phase 2. - Boundary markers: The skill mandates the use of a
wraphelper (detailed inreferences/untrusted-output.md) that utilizes per-read randomized nonces and XML-style tags to isolate external data. - Capability inventory: The skill executes administrative commands via
kubectl,helm,eksctl, and theobserveCLI. - Sanitization: The
wraphelper includes a sanitizer usingsedandtrto strip ANSI escape sequences and control characters, preventing terminal-based injection or visual manipulation of output. - [COMMAND_EXECUTION]: The skill uses administrative shell commands to orchestrate the deployment and verification of the Kubernetes explorer.
- Evidence: Orchestrates commands like
kubectl patch,helm install, andeksctl create fargateprofilewithinSKILL.mdandreferences/fargate-reference.mdto configure the cluster environment. - Scope: The commands are standard for Kubernetes resource management and are restricted to the vendor-specific tools and official Kubernetes utilities.
Audit Metadata