deploy-to-kubernetes
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes hardcoded example credentials such as 'sup3rs3cr3t!' and an example API key 'sk-1234567890abcdef' within configuration templates.
- [EXTERNAL_DOWNLOADS]: The skill downloads the metrics-server manifest from the official kubernetes-sigs GitHub repository.
- [COMMAND_EXECUTION]: The skill uses kubectl and helm to perform cluster operations, which is appropriate for the DevOps use case.
- [INDIRECT_PROMPT_INJECTION]: The skill processes logs and resource descriptions from a Kubernetes cluster, which is an external and potentially untrusted data source. 1. Ingestion points: kubectl logs and kubectl describe in SKILL.md and references/EXAMPLES.md. 2. Boundary markers: None. 3. Capability inventory: Bash shell, Write, and Edit tools. 4. Sanitization: None.
Audit Metadata