Audit History

Static analysis flagged many URLs, shell snippets, filesystem redirects, and environment-value examples. Context review shows those detections are Helm documentation, reusable templates, or a local validation script rather than malicious behavior. One semantic issue remains: the examples include a weak default PostgreSQL password that should not be deployable as-is.

Static analysis flagged many URLs, shell snippets, filesystem redirects, and environment-value examples. Context review shows those detections are Helm documentation, reusable templates, or a local validation script rather than malicious behavior. One semantic issue remains: the examples include a weak default PostgreSQL password that should not be deployable as-is.

Static analysis reported many high-risk patterns, but review shows most are false positives from Helm template syntax, placeholder URLs, and documentation examples. The main residual risk is the included validation script, which intentionally runs Helm and jq commands on a caller-provided chart directory and should be used only with trusted chart inputs.

This is a documentation and guidance skill for Helm chart development. Contains a validation script that runs local Helm commands for linting, templating, and dry-run installation. All 198 static findings are false positives triggered by documentation code blocks, standard Helm repository URLs, and legitimate YAML parsing operations. No malicious intent detected.

This is a documentation and guidance skill for Helm chart development. Contains a validation script that runs local Helm commands for linting, templating, and dry-run installation. All 198 static findings are false positives triggered by documentation code blocks, standard Helm repository URLs, and legitimate YAML parsing operations. No malicious intent detected.

This is a documentation and guidance skill for Helm chart development. Contains a validation script that runs local Helm commands for linting, templating, and dry-run installation. No network calls, no sensitive file access, no credential theft indicators.

This is a documentation and guidance skill for Helm chart development. Contains a validation script that runs local Helm commands for linting, templating, and dry-run installation. No network calls, no sensitive file access, no credential theft indicators.