deploy-aws-eks-workloads
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes robust security standards for AWS EKS, prioritizing EKS Pod Identity to replace legacy OIDC trust policies and enforcing immutable image tags in ECR to ensure supply chain integrity.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies the inherent risk of indirect prompt injection when processing content from GitOps repositories or pull request templates. It mitigates this by instructing the agent to validate all rendered manifests against Kyverno policies and Common Expression Language (CEL) rules before applying changes to the cluster, ensuring that external data does not unintentionally influence system state.
Audit Metadata