helm-release-management

Warn

Audited by Snyk on Feb 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's required workflows (SKILL.md and REFERENCE.md) explicitly fetch and inspect public Helm chart repository content—e.g., "helm repo add ...", "helm show readme bitnami/nginx", and "helm show values"—which pulls untrusted, user-maintained README/changelog/values that the agent is expected to read and that can materially influence upgrade/install decisions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 07:07 PM