testland/chaos-experiment-author
Build-an-X workflow for a chaos experiment per the Principles of Chaos Engineering - defines steady-state hypothesis, picks the variables (real-world events: network latency, node failure, region outage), sets the blast radius (which percentage / namespace / user cohort), automates execution, and emits the verdict (steady-state held / didn't hold). Includes the five-check pre-flight validation of the steady-state hypothesis (measurable, baselined, SLI-backed tolerance, defined measurement window, metric moves under the fault) with hard-reject rules, and routes the tool choice: Chaos Mesh has its own standalone skill, while LitmusChaos and Gremlin setup live in this skill's references. Use to scope and pre-flight-validate a chaos experiment before running it via Chaos Mesh / Litmus / Gremlin / Toxiproxy.
77
97%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill contains runtime commands that fetch and execute remote manifests or trigger remote actions (e.g., kubectl apply -f https://hub.litmuschaos.io/api/chaos/2.14.0?file=charts/generic/pod-delete/experiment.yaml and curl to https://api.gremlin.com/v1/attacks/new), which would download/execute external content during runtime.
Where we found it
kubectl apply -f https://hub.litmuschaos.io/api/chaos/2.14.0?file=charts/generic/pod-delete/experiment.yaml
command · 1 site
The plugin instructs the agent to fetch and apply a remote Kubernetes manifest directly from the LitmusChaos hub at runtime, downloading and executing unverified external YAML.
references/litmus.md
65
kubectl apply -f https://hub.litmuschaos.io/api/chaos/2.14.0?file=charts/generic/pod-delete/experiment.yaml
curl -X POST "https://api.gremlin.com/v1/attacks/new"
command · 3 sites
The plugin instructs the agent to use curl to trigger remote Gremlin API actions (attacks and scenarios) at runtime, executing destructive remote operations.
references/gremlin.md
93
curl -X POST "https://api.gremlin.com/v1/attacks/new"
references/gremlin-advanced-operations.md
92
curl -X POST "https://api.gremlin.com/v1/attacks/new"
113
curl -X POST "https://api.gremlin.com/v1/scenarios/
litmuschaos/litmus (Helm chart from https://litmuschaos.github.io/litmus-helm/)
dependency · 2 sites
The plugin instructs the agent to add a remote Helm repository and install the LitmusChaos chart at runtime, fetching unverified external content.
references/litmus.md
38
helm repo add litmuschaos https://litmuschaos.github.io/litmus-helm/
references/litmus.md
39
helm install litmuschaos litmuschaos/litmus -n litmus --create-namespace
gremlin/gremlin (Helm chart from https://helm.gremlin.com)
dependency · 2 sites
The plugin instructs the agent to add a remote Helm repository and install the Gremlin chart at runtime, fetching unverified external content.
references/gremlin.md
53
helm repo add gremlin https://helm.gremlin.com
references/gremlin.md
54
helm install gremlin gremlin/gremlin \
gremlin (apt package)
dependency · 1 site
The plugin instructs the agent to install the Gremlin package via apt at runtime, fetching an unverified external package.
references/gremlin.md
46
sudo apt install -y gremlin
- Audited
- Security analysis