← Back to Skills Marketplace
Helm Chart Linter
by
charlie-morrison
· GitHub ↗
· v1.0.0
· MIT-0
78
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install helm-chart-linter
Description
Lint and validate Helm charts for structure, security, dependencies, and best practices. Use when asked to lint, validate, check, or audit Helm charts, verif...
README (SKILL.md)
Helm Chart Linter
A pure Python 3 (stdlib only) linter and validator for Helm chart directories. Checks structure, security, dependencies, and best practices across 22 rules.
Commands
python3 scripts/helm_chart_linter.py \x3Ccommand> \x3Cchart-dir> [options]
| Command | Description |
|---|---|
lint |
Lint chart structure and best practices (all rules) |
security |
Run security-focused checks only |
dependencies |
Validate Chart.yaml/Chart.lock dependencies |
validate |
Full validation: structure + security + dependencies |
Options
| Option | Description |
|---|---|
--format text|json|markdown |
Output format (default: text) |
--strict |
Exit 1 on warnings as well as errors (CI mode) |
Examples
# Basic lint
python3 scripts/helm_chart_linter.py lint ./my-chart
# Full validation with JSON output
python3 scripts/helm_chart_linter.py validate ./my-chart --format json
# Security audit, strict mode for CI
python3 scripts/helm_chart_linter.py security ./my-chart --strict
# Dependency check with Markdown report
python3 scripts/helm_chart_linter.py dependencies ./my-chart --format markdown
Rules
Structure (6 rules)
CHART001— Chart.yaml exists and has required fields (apiVersion, name, version, description)CHART002— Version is valid semverCHART003— values.yaml existsCHART004— templates/ directory existsCHART005— NOTES.txt exists in templates/ (warning)CHART006— .helmignore exists (warning)
Security (6 rules)
SEC001— No hardcoded secrets in values.yaml (passwords, tokens, keys)SEC002— No privileged containers (securityContext.privileged: true)SEC003— No hostNetwork, hostPID, or hostIPC enabledSEC004— Resource limits defined in templatesSEC005— No runAsRoot without explicit runAsNonRootSEC006— Image tags not "latest"
Dependencies (4 rules)
DEP001— Chart.lock present and matches Chart.yaml dependenciesDEP002— No wildcard version constraintsDEP003— Repository URLs use HTTPSDEP004— No duplicate dependency names
Best Practices (6 rules)
BP001— Labels include app.kubernetes.io/name, version, managed-byBP002— Liveness and readiness probes definedBP003— Service account name configuredBP004— Namespace not hardcoded in templatesBP005— No deprecated API versions (extensions/v1beta1, apps/v1beta1, etc.)BP006— Values documented with comments
Exit Codes
| Code | Meaning |
|---|---|
0 |
No issues (or only warnings in normal mode) |
1 |
Errors found (or warnings found in --strict) |
2 |
Script/usage error |
Usage Guidance
The skill appears coherent: it bundles a Python linter and SKILL.md that tell the agent to run the script on a chart directory, and it requests no external credentials or install steps. However the main script was truncated in the bundle you provided, so you should: 1) Inspect the entire scripts/helm_chart_linter.py before installing — search for network usage (urllib, http, socket, requests, subprocess with curl/ssh), code that reads outside the specified chart-dir (e.g., expands ~, reads /etc, ~/.ssh), or code that writes to unexpected locations. 2) Run the script in an isolated environment (container or VM) on sample charts first. 3) If you need higher assurance, ask the publisher for a full code review or for a provenance link (homepage or repository) and verify the binary/script hash. 4) Note STATUS.md mentions a price ($59) — confirm licensing and distribution expectations before use. If the rest of the script contains no outbound/network calls or reads of unrelated files, this skill is likely benign; discovery of network/exfiltration calls or requests for credentials would raise the assessment to malicious.
Capability Analysis
Type: OpenClaw Skill
Name: helm-chart-linter
Version: 1.0.0
The Helm Chart Linter skill bundle is a legitimate utility for performing static analysis on Kubernetes Helm charts. The primary script, scripts/helm_chart_linter.py, implements a custom YAML parser and 22 linting rules covering security, structure, and best practices without any external dependencies. There is no evidence of data exfiltration, unauthorized network access, or malicious execution; the script only reads files within the target directory and outputs text/JSON/Markdown reports as described in SKILL.md.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (Helm chart linting) matches the provided SKILL.md and the included Python script which implements a YAML parser and sets up linting rules for charts. No extraneous capabilities are declared (no env vars, no required binaries, no install).
Instruction Scope
SKILL.md instructs the agent to run the included Python script against a specified chart directory (python3 scripts/helm_chart_linter.py <command> <chart-dir>). That scope is appropriate for linting and the visible code shows parsers and rule checks. However the script file was truncated in the bundle you provided, so I cannot verify there are no instructions or code paths that read unrelated files, access home directories, or transmit data.
Install Mechanism
No install spec is present (instruction-only + bundled script). This minimizes install-time risk — nothing is being downloaded or extracted at install time.
Credentials
The skill declares no required environment variables, credentials, or config paths, and SKILL.md doesn't request any. That is proportional for a local linter which should only need access to the chart directory.
Persistence & Privilege
always is false, user-invocable is true, and the skill does not request persistent system presence or to modify other skills. Autonomy is enabled by default for skills, which is expected here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install helm-chart-linter - After installation, invoke the skill by name or use
/helm-chart-linter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Helm Chart Linter?
Lint and validate Helm charts for structure, security, dependencies, and best practices. Use when asked to lint, validate, check, or audit Helm charts, verif... It is an AI Agent Skill for Claude Code / OpenClaw, with 78 downloads so far.
How do I install Helm Chart Linter?
Run "/install helm-chart-linter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Helm Chart Linter free?
Yes, Helm Chart Linter is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Helm Chart Linter support?
Helm Chart Linter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Helm Chart Linter?
It is built and maintained by charlie-morrison (@charlie-morrison); the current version is v1.0.0.
More Skills