k8s-ndots-search-domain-nxdomain-flood
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Kubernetes and Terraform commands (
kubectl exec,kubectl apply,kubectl run,terraform import) to manage cluster configuration and verify DNS resolution. These operations are aligned with the skill's stated purpose of managing a Kubernetes cluster. - [EXTERNAL_DOWNLOADS]: The verification step suggests running a temporary pod using the
busyboximage. This is a standard practice for network diagnostics in Kubernetes and uses a well-known, trusted image. - [DATA_EXFILTRATION]: The skill mentions interacting with the Technitium DNS API for logging and cache persistence. It uses placeholders like
TOKENandyour-dns-server-ip, which encourages safe credential management by the user rather than hardcoding sensitive information. - [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were found. The language used is strictly instructional and technical.
- [SAFE]: The technical implementation (using a CoreDNS
templateregex) is a legitimate approach to solving the specific 'ndots' search domain issue described. References to the 'viktorbarzin.lan' domain are consistent with the provided author context.
Audit Metadata