helm-validator
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/setup_tools.shprovides commands to download the official Helm 3 installation script from the Helm project's repository on GitHub. - [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of required tools by executing remote scripts from the trusted
helm/helmrepository via piped shell execution. - [COMMAND_EXECUTION]: The toolkit executes local commands including
helm,yamllint, andkubeconformto process and validate chart templates. - [INDIRECT_PROMPT_INJECTION]: The skill processes external Helm chart data (YAML/templates) which could contain malicious instructions.
- Ingestion points: Helm chart source files and rendered manifests (SKILL.md Stages 3-5).
- Boundary markers: Standard command-line tool execution boundaries.
- Capability inventory: Execution of subprocesses for linting, rendering, and schema validation.
- Sanitization: Relies on the parsing and validation logic of the underlying tools (Helm, kubeconform).
Audit Metadata