iac-scan-kube-linter

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the kube-linter CLI tool to scan Kubernetes manifests and Helm charts. This is the primary intended function of the skill and is performed on local paths provided by the user.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of Kubernetes YAML files and Helm charts, which could theoretically contain malicious instructions; however, these are processed by the kube-linter binary rather than being directly interpreted as agent instructions.
  • Ingestion points: Kubernetes manifests and Helm chart directories specified by the user in Step 2 of SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: Execution of the kube-linter binary via shell.
  • Sanitization: None specified for the input path or file content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 06:47 PM
Security Audit — agent-trust-hub — iac-scan-kube-linter