helm-chart-scaffolding
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/validate-chart.shdesigned to runhelm lint,helm template, andhelm install --dry-runto verify chart integrity. The playbook also instructs the user to execute these and other Helm CLI commands. - [EXTERNAL_DOWNLOADS]: Chart templates (
assets/Chart.yaml.template) and documentation reference the Bitnami repository (https://charts.bitnami.com/bitnami) to fetch standard dependencies such as PostgreSQL and Redis. Bitnami is a well-known service for Kubernetes application packages. - [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection through the ingestion and processing of external data.
- Ingestion points: The
scripts/validate-chart.shscript accepts a directory path as an argument, and Helm templates interpolate values fromvalues.yamlinto Kubernetes manifests. - Capability inventory: The skill uses shell execution for
helmoperations, including manifest rendering and dry-run installations which involve processing the templates. - Sanitization: Standard Helm templating functions are used for rendering, but no specific sanitization or filtering for adversarial prompt injection in the values is implemented.
- Boundary markers: No delimiters or explicit instructions are provided to the agent to ignore embedded instructions within the processed data.
Audit Metadata