cnpg-skill

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves the CloudNativePG operator manifest from the project's official GitHub repository. This is the standard method for deploying the operator and is consistent with best practices.
  • [COMMAND_EXECUTION]: The skill uses kubectl commands to apply configurations and verify the status of the operator. These operations are necessary for the skill's primary function of Kubernetes cluster management.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a template-based workflow for deploying database clusters based on user requests. This creates an attack surface where untrusted user input could potentially influence the generated Kubernetes manifests, although no specific exploitable patterns are present in the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 09:01 AM