helm-charts
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to manage Kubernetes resources. Evidence: Commands such as
helm install,helm upgrade, andkubectl diffare explicitly documented inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes a templating mechanism where external configuration values are interpolated into Kubernetes manifests. 1. Ingestion points: Untrusted data is ingested through
values.yamland command-line--setflags inSKILL.md. 2. Boundary markers: The templates lack explicit delimiters or instructions to ignore embedded commands within variable values. 3. Capability inventory: The skill useshelmandkubectlinSKILL.mdto deploy resources, providing a path from data ingestion to environment modification. 4. Sanitization: Manifest generation relies on standard Helm functions without additional security-focused sanitization of user-provided values. - [EXTERNAL_DOWNLOADS]: The skill includes instructions for fetching third-party application charts from external sources. Evidence: The skill fetches configuration and packages from the Bitnami repository (
https://charts.bitnami.com/bitnami), which is a well-known service for containerized applications.
Audit Metadata