chatqna-helm-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
helmandkubectlto deploy and manage application resources on a Kubernetes cluster. This includes common deployment operations such ashelm upgrade --install,helm dependency build, andkubectl rollout status. It also usescurlto verify application readiness via health endpoints.\n- [EXTERNAL_DOWNLOADS]: The skill fetches Helm charts and dependencies from an external registry. Specifically, it useshelm pullto download thechat-question-and-answer-corechart from the official Intel repository on Docker Hub (oci://registry-1.docker.io/intel/). This is a standard procedure for retrieving verified deployment artifacts from a well-known vendor.\n- [PROMPT_INJECTION]: The skill features a surface for indirect prompt injection as it incorporates user-supplied configuration variables and environment parameters directly into shell command arguments and generated YAML files.\n - Ingestion points: Data enters the execution flow via user-specified parameters such as target
namespace,release name, and version tags (e.g.,BACKEND_TAG,UI_TAG) provided through prompts or environment variable mappings.\n - Boundary markers: There are no explicit delimiters or instructions provided to isolate or escape user-controlled data within the shell commands.\n
- Capability inventory: The skill leverages high-privilege tools such as
helmandkubectlto modify cluster state andcurlto interact with the network.\n - Sanitization: The instructions do not define validation or sanitization routines for input strings before they are interpolated into executable shell commands.
Audit Metadata