Best fit
Catches insecure defaults in Helm charts: privileged containers, secrets in values, missing NetworkPolicy, and more.
// security
Helm Chart Security Doctor
Audit a Helm chart for insecure defaults before you deploy to Kubernetes.
What it flags
- Privileged containers and allowPrivilegeEscalation.
- Missing resource limits.
- hostPath volumes and host namespace sharing.
- readOnlyRootFilesystem not set.
- runAsNonRoot not enforced.
- Secrets in values.yaml.
- Missing NetworkPolicy and exposed Services.
How to run
Point it at the chart. It parses YAML with the standard library; no Helm, kubectl, or cluster needed. Read-only.
Good to know
Heuristic. It reads chart source as text and does not evaluate templating merged at install time.
// choose with context
Is Helm Chart Security Doctor the right skill?
It returns
Catches insecure defaults in Helm charts: privileged containers, secrets in values, missing NetworkPolicy, and more.
Do not use it as
Do not treat a successful run as proof beyond the supplied files, declared scope, and evidence the skill actually checked.
Compatibility, access, version, and licence
- Reads or accesses
- Only the files or context you deliberately provide; review the listing before granting additional access.
- Compatibility
- Agents that read the open SKILL.md format. Verify runtime and service requirements at the purchase or install destination.
- Version
- Verify the current package version at the linked destination.
- Licence
- Review the package licence and seller terms at the linked destination.
Questions
Why Helm specifically?
Default charts often ship insecure, and one bad template propagates across every install.
Does it change anything?
No. It is read-only and uses no network.
Find the insecure default before the cluster does.
Current price and purchase option are shown on Agensi. Instant download. Works with any agent that reads SKILL.md.
Get Helm Chart Security Doctor on Agensi