velero
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the official Velero CLI binary from the
vmware-tanzuGitHub repository. This is a well-known and trusted source for this specific tool. - Evidence:
wget https://github.com/vmware-tanzu/velero/releases/download/v1.13.0/velero-v1.13.0-linux-amd64.tar.gzinSKILL.md. - [COMMAND_EXECUTION]: The skill uses standard administrative commands like
sudo mvto install the binary to the system path and executes variousveleroCLI commands for backup and restore operations. - Evidence:
sudo mv velero-v1.13.0-linux-amd64/velero /usr/local/bin/inSKILL.md. - [CREDENTIALS_SAFE]: The skill documentation correctly instructs the user to provide credentials via a file (
--secret-file ./credentials-velero) and provides a template with placeholders rather than hardcoding actual secrets. - Evidence:
aws_access_key_id=AKIA...inSKILL.mdis a safe placeholder pattern.
Audit Metadata