argocd-cli-guide
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides command patterns for interacting with Kubernetes clusters using the
argocdCLI. It covers status retrieval, log streaming, application synchronization, and rollbacks. The instructions emphasize safety by requiring adiffcommand before anysyncoperation to preview changes. - [DATA_EXFILTRATION]: The skill references the standard configuration path
~/.config/argocd/configinreferences/argocd-config.md. This file typically contains sensitive authentication tokens. While the skill describes this for configuration purposes and does not provide instructions to transmit the file, it identifies a sensitive data location. - [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by instructing the agent to ingest and act upon potentially untrusted data from the cluster. 1. Ingestion points:
argocd app logs,argocd app get, andargocd app get-resourceinSKILL.md. 2. Boundary markers: Absent. 3. Capability inventory:argocd app sync,argocd app rollback, andargocd app actions runinSKILL.md. 4. Sanitization: Absent.
Audit Metadata