k8s-manifest-generator
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of static documentation, YAML templates, and reference materials. No executable scripts, binaries, or remote dependencies are present that could be exploited during execution.
- [SAFE]: The manifests and instructions provided by the skill emphasize security hardening. Examples explicitly include securityContext configurations that enforce non-root execution, privilege escalation prevention, and the use of the RuntimeDefault seccomp profile.
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a manifest generator that takes user-provided application requirements to fill various YAML templates. Ingestion points: User-supplied data like application names, container images, and port configurations gathered via the workflow in
references/details.md. Boundary markers: None present; the skill treats user input as the authoritative source for template variables. Capability inventory: The skill provides instructions for usingkubectlto manage resources and suggests validation tools likekube-scoreandkube-linter. Sanitization: No explicit sanitization or validation of user-provided strings is implemented within the text templates.
Audit Metadata