eks-workload-best-practice-assessment
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
kubectlandawsCLI commands to gather cluster metadata, workload configurations (Deployments, StatefulSets, etc.), and ECR image scan findings. These operations are performed to facilitate the best practice assessment and are restricted to data collection within the user's configured environment. - [EXTERNAL_DOWNLOADS]: Retrieves current best practices from well-known and trusted services, including the official Kubernetes documentation via
context7and the EKS Best Practices Guide viaaws-knowledge-mcp-server. - [INDIRECT_PROMPT_INJECTION]: The skill acts on data retrieved from the EKS cluster (such as pod specifications and events) and documentation from MCP tools, which are external sources.
- Ingestion points: Workload configuration JSON from
kubectl, image scanning results fromaws ecr, and documentation content from MCP search tools. - Boundary markers: Not explicitly defined in the processing logic for cluster data.
- Capability inventory: Performs read operations on the cluster, executes documentation searches, and writes results to local markdown files using the
Write/filetool. - Sanitization: The skill processes structured data (JSON) and applies version-aware filters, which provides a layer of validation for the ingested cluster information.
Audit Metadata