kubernetes-specialist
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands for established Kubernetes tools and platforms from well-known sources. Examples include fetching manifests from official GitHub repositories for ArgoCD and Flux, and downloading binaries for Istio, Linkerd, and Cluster API. These operations are standard in the DevOps domain and target trusted vendor domains.
- [COMMAND_EXECUTION]: The instructions and reference files contain extensive command-line examples for
kubectl,helm,istioctl, and other infrastructure tools. These are used for administrative tasks such as deploying resources, inspecting logs, and troubleshooting cluster issues as intended for a Kubernetes specialist. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface for indirect prompt injection as it involves processing external data such as container logs (
kubectl logs) and user-provided manifests. However, this risk is inherent to the domain and the skill does not exhibit dangerous autonomous execution of that data.
Audit Metadata