kafka-setup

Warn

Audited by Gen Agent Trust Hub on Feb 21, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS] (MEDIUM): In the file examples.md, the command kubectl create -f 'https://strimzi.io/install/latest?namespace=kafka' is used to install the Strimzi operator. This fetches manifests from a remote host and executes them within the Kubernetes cluster. As strimzi.io is not on the trusted source list, this represents a remote code execution vector. The severity is adjusted to MEDIUM as it is a common practice for this specific tool's installation and aligns with the skill's purpose.
  • [COMMAND_EXECUTION] (LOW): The skill includes several kubectl, docker-compose, and cluster orchestration commands. While necessary for the primary purpose of infrastructure setup, these operations often require significant administrative privileges.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 12:24 PM