kustomize
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Provides instructions for executing
kubectlandkustomizecommands to manage Kubernetes resources, including building, applying, and deleting manifests. - [EXTERNAL_DOWNLOADS]: Demonstrates how to reference remote Kubernetes manifests from GitHub and Helm charts from the Prometheus community repository.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill describes how to pull resources from remote Git repositories and URLs (e.g.,
github.com,raw.githubusercontent.com) withinkustomization.yamlfiles (SKILL.md). - Boundary markers: Includes specific warnings in the 'Render and secret boundaries' section to use reviewed immutable references and avoid enabling plugins or remote resources from untrusted inputs.
- Capability inventory: The skill utilizes
kubectl apply,kubectl delete, andkubectl kustomizeto perform operations that modify the state of a Kubernetes cluster. - Sanitization: No automated sanitization of remote data is provided; the skill relies on manual user validation and the use of
kubectl diffto inspect changes before application.
Audit Metadata