kustomize

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Provides instructions for executing kubectl and kustomize commands to manage Kubernetes resources, including building, applying, and deleting manifests.
  • [EXTERNAL_DOWNLOADS]: Demonstrates how to reference remote Kubernetes manifests from GitHub and Helm charts from the Prometheus community repository.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill describes how to pull resources from remote Git repositories and URLs (e.g., github.com, raw.githubusercontent.com) within kustomization.yaml files (SKILL.md).
  • Boundary markers: Includes specific warnings in the 'Render and secret boundaries' section to use reviewed immutable references and avoid enabling plugins or remote resources from untrusted inputs.
  • Capability inventory: The skill utilizes kubectl apply, kubectl delete, and kubectl kustomize to perform operations that modify the state of a Kubernetes cluster.
  • Sanitization: No automated sanitization of remote data is provided; the skill relies on manual user validation and the use of kubectl diff to inspect changes before application.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:57 AM