cert_manager
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs fetching and applying a public GitHub manifest (kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.0/cert-manager.yaml), which causes the agent/environment to ingest and act on untrusted third-party content that can change runtime behavior.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs at runtime to run "kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.0/cert-manager.yaml", which fetches and immediately applies remote Kubernetes manifests (executing remote code/config) that the skill depends on, so this URL is a runtime external dependency that can execute code on the cluster.
Audit Metadata