vss-deploy-helm
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/vss-bootstrap.shscript is used to obtain the application source code. By default, it performs a shallow, sparse git clone fromhttps://github.com/open-edge-platform/edge-ai-libraries.git. As this repository belongs to the vendor (open-edge-platform) and is required for the skill's core functionality, this is considered a safe and expected operation. - [COMMAND_EXECUTION]: The skill instructs the agent to execute a bundled shell script to set up the environment and subsequently run standard
kubectlandhelmcommands for application deployment. These actions are within the expected scope of a Kubernetes deployment tool and do not attempt unauthorized privilege escalation. - [CREDENTIALS_UNSAFE]: The skill documentation includes examples for
user_values_override.yamlthat contain placeholders for sensitive information such as Hugging Face tokens and database passwords (e.g.,hf_...,change-me). It explicitly warns the agent and user not to commit filled secrets to version control, which aligns with standard security best practices.
Audit Metadata