kafka-setup
Warn
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): In the file
examples.md, the commandkubectl create -f 'https://strimzi.io/install/latest?namespace=kafka'is used to install the Strimzi operator. This fetches manifests from a remote host and executes them within the Kubernetes cluster. Asstrimzi.iois not on the trusted source list, this represents a remote code execution vector. The severity is adjusted to MEDIUM as it is a common practice for this specific tool's installation and aligns with the skill's purpose. - [COMMAND_EXECUTION] (LOW): The skill includes several
kubectl,docker-compose, and cluster orchestration commands. While necessary for the primary purpose of infrastructure setup, these operations often require significant administrative privileges.
Audit Metadata