Skip to content
← Registry
Trust Report

linkerd-patterns

Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.

88
CONDITIONAL
Format: openclawScanner: v0.8.0Duration: 18msScanned: 8d ago · May 2, 1:13 PMSource →
Embed this badge
AgentVerus CONDITIONAL 88AgentVerus CONDITIONAL 88AgentVerus CONDITIONAL 88
[![AgentVerus](https://agentverus.ai/api/v1/skill/8991b203-cb4b-4c31-9bb9-dddc64c55108/badge)](https://agentverus.ai/skill/8991b203-cb4b-4c31-9bb9-dddc64c55108)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/8991b203-cb4b-4c31-9bb9-dddc64c55108/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"8991b203-cb4b-4c31-9bb9-dddc64c55108","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/8991b203-cb4b-4c31-9bb9-dddc64c55108/trust

Category Scores

82
Permissions
100
Injection
87
Dependencies
100
Behavioral
70
Content
80
Code Safety

Findings (8)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highDownload-and-execute pattern (curl|wget pipe to shell)-20

Piping a downloaded script directly to a shell interpreter. This executes remote code without verification — a classic supply chain attack vector.

curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh

Review the code block starting at line 56. Ensure this pattern is necessary and does not pose a security risk.

code-safetyASST-04
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://run.linkerd.io/install

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://west.example.com:6443

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://run.linkerd.io/install

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowDownload-and-execute pattern detected (known installer)

The skill references a well-known installer script in its setup instructions.

curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh

Consider documenting the exact version or hash of the installer for supply chain verification.

dependenciesASST-04
lowInstall pattern: download and execute from remote URL (in setup section)

The skill contains a curl-pipe-to-shell pattern in its setup/prerequisites section.

curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh

Consider pinning the installer to a specific version or hash for supply chain verification.

behavioralASST-02
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09