gitops-cd-developer

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscated code were detected. The skill serves its stated purpose of providing GitOps configuration templates and guidance.- [COMMAND_EXECUTION]: The shell script scripts/package-and-push.sh utilizes standard CLI tools (helm, yq, cosign) to automate the packaging and distribution of Helm charts. The script uses safe bash practices like set -euo pipefail and proper variable quoting to prevent command injection.- [EXTERNAL_DOWNLOADS]: The documentation references official installation manifests for well-known services (e.g., Argo Rollouts from GitHub). These references are part of legitimate setup instructions for the user and do not involve silent or untrusted background downloads.- [DATA_EXFILTRATION]: The skill demonstrates a strong security posture regarding sensitive data. It explicitly instructs users to avoid storing secrets in Git and provides templates for integrating with secure secret management solutions like External Secrets Operator and SOPS. Registry credentials in the automation script are handled via standard environment variables or user-provided secrets files.- [PROMPT_INJECTION]: The instructional content in SKILL.md is focused entirely on technical GitOps workflows and does not contain any attempts to bypass AI safety guardrails or override system instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 07:10 AM