cnpg-skill
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves the CloudNativePG operator manifest from the project's official GitHub repository. This is the standard method for deploying the operator and is consistent with best practices.
- [COMMAND_EXECUTION]: The skill uses
kubectlcommands to apply configurations and verify the status of the operator. These operations are necessary for the skill's primary function of Kubernetes cluster management. - [INDIRECT_PROMPT_INJECTION]: The skill defines a template-based workflow for deploying database clusters based on user requests. This creates an attack surface where untrusted user input could potentially influence the generated Kubernetes manifests, although no specific exploitable patterns are present in the provided instructions.
Audit Metadata