vllm-deploy-k8s
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
kubectlto interact with a Kubernetes cluster. It performs standard operations including creating, checking, and deleting Deployments, Services, and Secrets. These operations are within the stated scope of managing a vLLM deployment. - [EXTERNAL_DOWNLOADS]: The deployment template references the
vllm/vllm-openai:latestcontainer image. This is the official image provided by the vLLM project and is considered a well-known and trusted source for this application. - [CREDENTIALS_UNSAFE]: The skill provides instructions for the agent to securely handle a Hugging Face API token. It asks the user for the token at runtime and uses
kubectl create secretto store it within the cluster. This is an appropriate method for secret management and avoids exposing credentials in plain text or history files. - [DATA_EXFILTRATION]: No unauthorized data access or external transmission patterns were detected. Network operations are limited to the Kubernetes API via
kubectland a local connectivity test viacurltolocalhost.
Audit Metadata