helm-validator

Fail

Audited by Socket on Mar 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The best-stated report (Report 2) presents a coherent, low-risk Helm chart validation workflow with a strong emphasis on read-only analysis and explicit remediation proposals. While external CRD documentation lookups add valuable context, they broaden the data surface and require explicit consent and careful data handling. Overall, the approach is sound for a supply-chain quality gate, with moderate security risk primarily due to external data lookups and tool sourcing. Recommended to implement strict sourcing, consent, and version-pin controls to minimize risk in real deployments.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 4, 2026, 08:57 AM
Package URL
pkg:socket/skills-sh/akin-ozer%2Fcc-devops-skills%2Fhelm-validator%2F@4797f65a041a96637919d4ea046042ba0cbf67ca