kubernetes-specialist
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of cluster management and infrastructure-as-code tools including
kubectl,helm, andterraformto provision and manage production environments. - [EXTERNAL_DOWNLOADS]: The skill references and downloads configuration files from well-known project repositories, including the Argo CD installation manifests from the
argoprojGitHub organization and Helm charts from Prometheus, AWS, and Kubernetes official registries. - [REMOTE_CODE_EXECUTION]: The skill applies remote manifests and installs remote Helm charts. While this constitutes execution of remote code on the cluster, the sources are well-known official repositories, representing standard operational procedure.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external infrastructure configuration data (YAML, HCL), which constitutes a theoretical attack surface. 1. Ingestion points: YAML manifests and Terraform configurations in
EXAMPLES.mdandREFERENCE.md. 2. Boundary markers: Explicit boundary markers are absent. 3. Capability inventory: The skill utilizeskubectl applyandhelm installwhich modify cluster state. 4. Sanitization: No specific input validation or sanitization logic is defined for the ingested configuration data.
Audit Metadata