k8s-policy
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides commands to install Kubernetes policy engines from external sources.
- Fetches installation manifests from Kyverno's official GitHub repository:
https://github.com/kyverno/kyverno/releases/latest/download/install.yaml. - Fetches installation manifests from the official Open Policy Agent (Gatekeeper) repository:
https://raw.githubusercontent.com/open-policy-agent/gatekeeper/master/deploy/gatekeeper.yaml. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Kubernetes cluster environment, creating a potential surface for indirect prompt injection.
- Ingestion points: Cluster policy reports and violation messages accessed via
get_policy_violations()inSKILL.md. - Boundary markers: Not explicitly defined for tool output processing.
- Capability inventory: The skill possesses
kubectl_applycapabilities for modifying cluster resources inSKILL.md. - Sanitization: Standard API responses are processed; specific sanitization for natural language instructions in resource labels or error messages is not mentioned.
Audit Metadata