helm-validator
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/setup_tools.shscript provides functionality to download the Helm installation script from its official repository on GitHub (https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3). This is a standard procedure for setting up the required environment and targets a well-known, trusted source. - [REMOTE_CODE_EXECUTION]: The skill includes instructions and scripts to execute the official Helm installation script via the system shell. This execution is limited to the initial setup of the validator's dependencies and originates from a verified project repository.
- [COMMAND_EXECUTION]: The skill's primary function involves executing standard Kubernetes-related binaries, including
helm,yamllint,kubeconform, andkubectl. These tools are used for template rendering, syntax checking, and dry-run cluster validation in a read-only capacity by default. - [PROMPT_INJECTION]: The skill processes user-provided Helm charts and templates. It manages the risk of indirect prompt injection by utilizing external binaries for validation and rendering rather than passing raw manifest content directly to the model as instructions. The skill also explicitly defines role boundaries, requiring user confirmation before applying any proposed fixes.
Audit Metadata