gitops-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation manifests for ArgoCD from the project's official GitHub repository (raw.githubusercontent.com/argoproj/argo-cd).
- [EXTERNAL_DOWNLOADS]: Downloads the official Flux CD installation script from the project's primary domain (https://fluxcd.io/install.sh).
- [COMMAND_EXECUTION]: Provides instructions to execute the Flux installation script using sudo. The skill mitigates risk by including an explicit step for the user to inspect the script content locally before execution.
- [PROMPT_INJECTION]: The skill facilitates the ingestion of data from external Git repositories to manage Kubernetes clusters. This creates a surface for indirect prompt injection where malicious manifests in a connected repository could attempt to influence agent behavior or cluster state. The skill provides safety guidance on secret management and sync policies to mitigate these risks.
Audit Metadata