helm-chart-scaffolding

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a utility script scripts/validate-chart.sh designed to run helm lint, helm template, and helm install --dry-run to verify chart integrity. The playbook also instructs the user to execute these and other Helm CLI commands.
  • [EXTERNAL_DOWNLOADS]: Chart templates (assets/Chart.yaml.template) and documentation reference the Bitnami repository (https://charts.bitnami.com/bitnami) to fetch standard dependencies such as PostgreSQL and Redis. Bitnami is a well-known service for Kubernetes application packages.
  • [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection through the ingestion and processing of external data.
  • Ingestion points: The scripts/validate-chart.sh script accepts a directory path as an argument, and Helm templates interpolate values from values.yaml into Kubernetes manifests.
  • Capability inventory: The skill uses shell execution for helm operations, including manifest rendering and dry-run installations which involve processing the templates.
  • Sanitization: Standard Helm templating functions are used for rendering, but no specific sanitization or filtering for adversarial prompt injection in the values is implemented.
  • Boundary markers: No delimiters or explicit instructions are provided to the agent to ignore embedded instructions within the processed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 12:21 PM
Security Audit — agent-trust-hub — helm-chart-scaffolding