tls-compliance
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands using
opensslandkubectlto generate self-signed certificates and deploy test infrastructure (namespaces, secrets, configmaps, and deployments). These commands are standard for verifying TLS configurations and are restricted to a dedicated test namespace (tls-test-ns). - [EXTERNAL_DOWNLOADS]: The skill references container images from well-known sources (
nginxinc/nginx-unprivileged) and provides links to official and community security tools on GitHub (openshift/tls-scannerandsebrandon1/tls-compliance-operator). These references are used for auditing and compliance monitoring purposes. - [SAFE]: The instructions emphasize security-first configurations, specifically recommending non-root containers and the deprecation of legacy TLS versions (1.0 and 1.1) in accordance with RFC 8996.
Audit Metadata