scylladb-kubernetes
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a command to install
cert-managercomponents directly from the ScyllaDB GitHub repository (raw.githubusercontent.com/scylladb/scylla-operator/...). As this is the official repository of the skill author, it is a legitimate and expected operation for the skill's purpose. It also references a community example repository (github.com/tluck/Scylla-K8s-Example) as a practitioner's reference while explicitly stating it is not the official interface.- [COMMAND_EXECUTION]: The skill contains numerouskubectlcommands for cluster management, resource inspection, and troubleshooting. These include applying manifests, patching finalizers for teardown recovery, and configuring node-level taints and labels. These commands are standard administrative actions required for operating a Kubernetes-based database and are presented as instructions for the user or agent to follow within the context of deployment and maintenance.- [CREDENTIALS_UNSAFE]: The skill includes instructions for managing and extracting sensitive data such as TLS certificates and database credentials from Kubernetes secrets. It provide instructions on how to extract and use serving CAs and client certificates for secure communication. It also provides best practices for securing these resources, including using IAM roles or Workload Identity for cloud-based object storage instead of hardcoding static keys, and instructions for changing default database passwords immediately upon deployment.
Audit Metadata