testland/chaos-mesh
Configures Chaos Mesh for Kubernetes-native chaos engineering - picks fault types (PodChaos, NetworkChaos, StressChaos, IOChaos, TimeChaos, DNSChaos, KernelChaos, HTTPChaos), targets via label selectors, controls blast radius via namespace whitelists + selector filters, schedules via CronJobs, observes via dashboard. Distinct from Litmus by architecture (Chaos Mesh has its own dashboard + workflow orchestration; Litmus uses ChaosCenter UI). Use when the target system runs on Kubernetes and fault experiments should be declared as CRDs in the cluster alongside the workloads they target.
71
89%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Medium
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W013: Attempt to modify system services in skill instructions.
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
The skill instructs running remote install scripts and kubectl/helm commands to deploy Chaos Mesh CRDs and workflows that intentionally kill pods and stress VMs (including PhysicalMachineChaos), which will modify cluster and target-machine state and enable destructive actions even though it does not explicitly request sudo or system-file edits.
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill's install step uses a runtime curl-pipe-to-bash command that fetches and executes remote code from https://mirrors.chaos-mesh.org/v2.6.3/install.sh, which directly executes external content during runtime.
Where we found it
curl -sSL https://mirrors.chaos-mesh.org/v2.6.3/install.sh | bash
command · 1 site
The plugin instructs fetching a remote shell script from mirrors.chaos-mesh.org and piping it directly to bash, executing unverified external code at runtime.
SKILL.md
37
curl -sSL https://mirrors.chaos-mesh.org/v2.6.3/install.sh | bash
chaos-mesh/chaos-mesh (helm chart from https://charts.chaos-mesh.org)
dependency · 2 sites
The plugin instructs adding a third-party Helm chart repository and installing the chaos-mesh chart from it, fetching and deploying unverified external code at runtime.
SKILL.md
39
helm repo add chaos-mesh https://charts.chaos-mesh.org
SKILL.md
40
helm install chaos-mesh chaos-mesh/chaos-mesh -n chaos-mesh --create-namespace
- Audited
- Security analysis