cnpg
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Kubernetes manifests (Cluster, ScheduledBackup, ObjectStore) and Terraform snippets for provisioning CloudNativePG. All identifiers are placeholders for user substitution.
- [SAFE]: Recommends security best practices for secret management, specifically using SOPS (Secrets Operation) with Age keys to encrypt credentials in GitOps repositories.
- [SAFE]: Promotes the use of GKE Workload Identity to authenticate backup processes to Google Cloud Storage, which eliminates the security risk associated with long-lived Service Account JSON keys.
- [SAFE]: External software references, including container images (ghcr.io/cloudnative-pg/postgresql) and operator plugins, target the official CloudNativePG project repositories.
- [SAFE]: Verification commands utilize standard administrative tools (kubectl, gcloud, aws, flux) for inspecting the user's own environment.
Audit Metadata