implementing-opa-gatekeeper-for-policy-enforcement

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The Python scripts scripts/agent.py and scripts/process.py execute kubectl via the subprocess module. This is used to query the Kubernetes API for constraint templates, active constraints, and policy violations. The execution uses a list format which prevents shell injection.
  • [EXTERNAL_DOWNLOADS]: The documentation references official repositories for installing Gatekeeper and its policy library. Specifically, it suggests using Helm to install from open-policy-agent.github.io and cloning the policy library from github.com/open-policy-agent/gatekeeper-library. These are well-known and expected sources for this technology.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 11:33 PM