Skill Detail

Kubernetes Manifest Generator

This skill generates Kubernetes manifests for deployments, services, and other resources. It helps you create production-ready Kubernetes configurations.

GitHub:sickn33/antigravity-awesome-skills k8s-manifest-generator
version 26c2e0fe0c4e
static analysis only
no human review yet
Use Caution

Current public label

Use Caution

Because the skill references secrets and external URLs, it is labeled with caution. This means you should carefully review the skill's configuration and usage.

This label is currently coming from the automated scorecard.

Automated result

Use Caution

Driftloom found that the skill's documentation and configuration files reference secrets and external URLs. The skill also references credentials in an executable context.

1 medium, 6 low Final label: use caution.

Human review

No human review has been recorded yet.

The current public label is still relying on automation. A human has not weighed in yet.

What happened

Driftloom completed a static scan. It inspected the skill files, recorded findings, and generated a scorecard.

Runtime evidence

No sandbox runtime result has been recorded yet.

Driftloom currently recommends runtime testing for this version (priority 40).

What did not happen

  • Driftloom did not run this skill in an isolated sandbox yet.
  • This label is not a guarantee that the skill is safe, bug-free, or appropriate for every environment.
  • A good score does not replace human judgment when a skill touches secrets, shell access, or external systems.

Source provenance

Source: Workspace import

Originally ingested from a local workspace copy.

Scorecard

Safety
67
Quality
100
Transparency
82
Operational
92
Maintenance
76

1 medium, 6 low Final label: use caution.

Severity mix: 1 medium, 6 low

What Driftloom checked

  • Read the skill files and metadata to understand what the skill claims to do.
  • Looked for shell commands and risky command patterns, even if none stood out strongly.
  • Looked for external URLs, network calls, and signs the skill reaches outside the machine.
  • Looked for secret, token, password, and credential references.
  • Checked whether the skill structure and references looked internally consistent.

Findings

Secret or credential reference detected
secret.reference · safety
Medium

The source references credentials or secret material in executable or configuration context.

File: assets/deployment-template.yaml
Evidence: Secret
Secret or credential reference detected
secret.reference · safety
Low

The docs mention credentials or secrets. That may be normal, but it still tells you the skill expects sensitive material somewhere in the workflow.

File: SKILL.md
Evidence: Secret
Secret or credential reference detected
secret.reference · safety
Low

The docs mention credentials or secrets. That may be normal, but it still tells you the skill expects sensitive material somewhere in the workflow.

File: references/deployment-spec.md
Evidence: Secret
Secret or credential reference detected
secret.reference · safety
Low

The docs mention credentials or secrets. That may be normal, but it still tells you the skill expects sensitive material somewhere in the workflow.

File: resources/implementation-playbook.md
Evidence: Secret
Explicit external endpoint reference detected
network.url_reference · transparency
Low

The docs reference an external endpoint or network flow in a context that likely matters to how the skill operates.

File: references/deployment-spec.md
Evidence: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.28/#deployment-v1-apps
Explicit external endpoint reference detected
network.url_reference · transparency
Low

The source references an external URL in a context that looks behaviorally relevant, not just decorative documentation.

File: assets/configmap-template.yaml
Evidence: http://backend:8080;
Explicit external endpoint reference detected
network.url_reference · transparency
Low

The docs reference an external endpoint or network flow in a context that likely matters to how the skill operates.

File: references/service-spec.md
Evidence: http://backend-service.production.svc.cluster.local
Driftloom is following the boring, correct architecture: Django control plane first, isolated runner later. Miraculously, restraint survives.