k8s-manifest-generator
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides production-grade Kubernetes templates that adhere to security best practices, including Pod Security Standards such as enforcing non-root users, disabling privilege escalation, and dropping Linux capabilities.
- [SAFE]: Instructions explicitly advise against hardcoding sensitive data and recommend industry-standard secret management solutions like HashiCorp Vault, Sealed Secrets, or External Secrets Operator.
- [SAFE]: No evidence of malicious command execution, data exfiltration, or obfuscation was found. All network-related commands in templates (e.g.,
curlfor health checks orncfor init container waits) are correctly scoped to local endpoints or internal cluster services. - [SAFE]: The skill promotes proactive security validation by recommending the use of linting and scoring tools such as
kube-scoreandkube-linterduring the manifest development workflow.
Audit Metadata