skills/mukul975/anthropic-cybersecurity-skills/implementing-opa-gatekeeper-for-policy-enforcement/Gen Agent Trust Hub
implementing-opa-gatekeeper-for-policy-enforcement
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts
scripts/agent.pyandscripts/process.pyexecutekubectlvia thesubprocessmodule. This is used to query the Kubernetes API for constraint templates, active constraints, and policy violations. The execution uses a list format which prevents shell injection. - [EXTERNAL_DOWNLOADS]: The documentation references official repositories for installing Gatekeeper and its policy library. Specifically, it suggests using Helm to install from
open-policy-agent.github.ioand cloning the policy library fromgithub.com/open-policy-agent/gatekeeper-library. These are well-known and expected sources for this technology.
Audit Metadata