sync-ci-to-staging
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
compare_configs.pyandsync_images.py) designed to automate the comparison and update of Kubernetes configuration files. These scripts use standard library functions to modify local files and compare image tags. The documentation instructs the agent to use external tools likegit,kubectl, andargocdto finalize deployments, which is consistent with the skill's primary function of environment synchronization. - [DATA_EXFILTRATION]: Analysis of the Python scripts revealed hardcoded local directory paths (e.g.,
/Users/cdd/Code/...) within the root-finding logic. These paths are used solely for locating the repository on the local filesystem. No network operations or attempts to transmit local data or configuration details to external servers were identified. - [SAFE]: The skill implements a safety classification system for Kubernetes resources. The
is_safe_to_syncfunction incompare_configs.pyidentifies files containing 'secret' or 'ingress' and labels them as unsafe to synchronize, reducing the risk of accidental exposure of sensitive credentials or infrastructure configuration during the automation process.
Audit Metadata