kubernetes-specialist
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- REMOTE_CODE_EXECUTION (HIGH): The skill explicitly recommends and provides commands for executing remote scripts directly from the internet using the dangerous
curl | shpattern inreferences/service-mesh.mdfor both Istio and Linkerd installations. - COMMAND_EXECUTION (MEDIUM): Documentation in
references/storage.mdandreferences/workloads.mdprovides templates for high-privilege operations, includingprivileged: truesecurity contexts andhostPathvolume mounts, which can be leveraged for container escape and host system compromise. - EXTERNAL_DOWNLOADS (LOW): The skill references external YAML manifests from unverified GitHub repositories (e.g.,
istio/istiosamples) for installing dashboard components like Kiali and Jaeger inreferences/service-mesh.md. - CREDENTIALS_UNSAFE (LOW): Reference files (
references/configuration.md) contain hardcoded dummy credentials, API key patterns (e.g.,sk-1234...), and private key headers. While these appear to be placeholders for documentation purposes, they provide a template that encourages hardcoding sensitive data in YAML manifests.
Recommendations
- AI detected serious security threats
Audit Metadata