eks
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads infrastructure components and configuration files from official sources. This includes fetching the
cert-managerdeployment YAML from its official GitHub repository, theeksctlbinary from the eksctl-io GitHub releases, and the Helm installation script from the official Helm GitHub repository. - [REMOTE_CODE_EXECUTION]: The Helm installation process involves fetching a shell script from the official Helm GitHub repository and piping it directly into
bashfor execution. - [PRIVILEGE_ESCALATION]: The skill uses
sudoto move theeksctlbinary into a system-wide executable path (/usr/local/bin) during installation. It also performs administrative tasks such as creating IAM policies and service accounts on AWS to support IRSA (IAM Roles for Service Accounts) configurations. - [COMMAND_EXECUTION]: The agent executes a variety of standard infrastructure management commands, including
aws,eksctl,kubectl,helm,openssl, anddig, to orchestrate the cluster setup, database provisioning, and application deployment.
Audit Metadata