pantheon-ai/k8s-yaml-validator
Comprehensive toolkit for validating, linting, and testing Kubernetes YAML resources. Use this skill when validating Kubernetes manifests, debugging YAML syntax errors, performing dry-run tests on clusters, or working with Custom Resource Definitions (CRDs) that require documentation lookup.
74
93%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill explicitly instructs the agent to look up CRD documentation via a WebSearch fallback and to fetch CRD schemas from a public raw.githubusercontent.com URL (see Stage 3 "Fallback to WebSearch" and Stage 4 schema-location), meaning it ingests and acts on untrusted, public third‑party content to drive validation decisions.
Where we found it
raw.githubusercontent.com/datreeio/CRDs-catalog
domain · 2 sites
The skill explicitly passes this URL to kubeconform as a schema-location, causing kubeconform to fetch CRD schemas from this public GitHub raw content endpoint at runtime for validation decisions.
SKILL.md
112
-schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json'
references/validation_workflow.md
50
-schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json'
WebSearch fallback for CRD documentation
content-type · 4 sites
The skill explicitly instructs the agent to fall back to WebSearch to fetch CRD documentation from the public web when context7 MCP fails, meaning it ingests and acts on untrusted third-party web content to drive validation decisions.
SKILL.md
98
2. **Fallback to WebSearch if context7 fails:**
100
"<kind>" "<group>" kubernetes CRD "<version>" documentation spec
references/validation_workflow.md
135
2. **Fallback to Web Search:**
136
- Search query: `"<kind>" "<group>" kubernetes CRD "<version>" documentation`
- Audited
- Security analysis