k8s-policy

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and provides commands to install Kubernetes policy engines from external sources.
  • Fetches installation manifests from Kyverno's official GitHub repository: https://github.com/kyverno/kyverno/releases/latest/download/install.yaml.
  • Fetches installation manifests from the official Open Policy Agent (Gatekeeper) repository: https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Kubernetes cluster environment, creating a potential surface for indirect prompt injection.
  • Ingestion points: Cluster policy reports and violation messages accessed via get_policy_violations() in SKILL.md.
  • Boundary markers: Not explicitly defined for tool output processing.
  • Capability inventory: The skill possesses kubectl_apply capabilities for modifying cluster resources in SKILL.md.
  • Sanitization: Standard API responses are processed; specific sanitization for natural language instructions in resource labels or error messages is not mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 06:52 PM