harness-keycloak-auth
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard Keycloak OIDC integration patterns for CI/CD environments. No malicious behaviors, obfuscation, or unauthorized data access were found.
- [COMMAND_EXECUTION]: The skill utilizes shell commands in Harness pipeline steps to perform integration tasks.
- Evidence: Bash scripts in
SKILL.mdusecurl,jq, andawsCLI for Keycloak API interaction and AWS Secrets Manager updates. - Context: These operations are consistent with the skill's purpose of automating authentication workflows.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe handling of credentials.
- Evidence: Authentication tokens and passwords are retrieved using Harness secret injection (e.g.,
<+secrets.getValue(...)>) and Kubernetes secret references.
Audit Metadata