helm

Eight principles, scored

Behavioral and source checks. Every non-pass row carries a copy-paste remediation prompt.

1. P1
   Non-Interactive by Default

   20 flag(s) found in --help but no `[env: NAME]` bindings advertised · secret-bearing flag(s) without `*-file` companion or stdin path: --kube-token. Flag values leak via process tables, shell history, and CI logs; provide stdin support or a `--<flag>-file` variant.

   Remediation · P1⧉ copy prompt

   Make helm satisfy P1 (Non-Interactive by Default) from the agent-native CLI standard. Address:
   - Flags advertise env-var bindings in --help (20 flag(s) found in --help but no `[env: NAME]` bindings advertised)
   - Secret-bearing flags expose stdin or *-file companion (secret-bearing flag(s) without `*-file` companion or stdin path: --kube-token. Flag values leak via process tables, shell history, and CI logs; provide stdin support or a `--<flag>-file` variant.)
   - Rich-TUI affordance for TTY contexts (no rich-TUI affordance detected (no `--tui`/`--interactive`/`--ui` flag, no spinner/progress/tui mention in --help). MAY-tier — rich TUI in TTY contexts is a nice-to-have, not required.)
   Requirements: https://anc.dev/p1

   fail
2. P2
   Structured, Parseable Output

   no --json or --jsonl short alias found. Agents and pipelines benefit from short forms alongside the canonical `--output` enum. · no `--raw` flag advertised. MAY-tier — useful for pipelines that want to strip formatting before piping to other tools.

   Remediation · P2⧉ copy prompt

   Make helm satisfy P2 (Structured, Parseable Output) from the agent-native CLI standard. Address:
   - --json / --jsonl short aliases for --output (no --json or --jsonl short alias found. Agents and pipelines benefit from short forms alongside the canonical `--output` enum.)
   - `--raw` flag for pipe-safe unformatted output (no `--raw` flag advertised. MAY-tier — useful for pipelines that want to strip formatting before piping to other tools.)
   - Bad invocation exits with structured usage-error code (2) (bad invocation exited with code 1. The 0/1/2/77/78 convention reserves code 2 for usage errors; using a different non-zero code (often 1) blurs the distinction between usage errors and general failure.)
   Requirements: https://anc.dev/p2

   warn
3. P3
   Progressive Help Discovery

   `--version` exited with code 1 · `--version` exited with code 1

   Remediation · P3⧉ copy prompt

   Make helm satisfy P3 (Progressive Help Discovery) from the agent-native CLI standard. Address:
   - Version flag works (`--version` plus short alias) (`--version` exited with code 1)
   - Version flag works (`--version` plus short alias) (`--version` exited with code 1)
   - `examples` subcommand or `--examples` flag for curated usage patterns (no `examples` subcommand or `--examples` flag found. MAY-tier — a curated usage block keeps agents from hunting through long help text.)
   - Short `-h` summary differs from `--help` long form (`-h` and `--help` produce byte-identical output. SHOULD-tier — clap renders the short summary on `-h` and the full description on `--help` when `long_about` is set; collapsing them gives agents no concise list-level grep target.)
   - Help text pairs human and `--output json` example invocations (no paired text + `--output json` example found within 5 lines in top-level or any subcommand `--help`. Pairing keeps agents from reverse-engineering the JSON invocation from the text one.)
   Requirements: https://anc.dev/p3

   fail
4. P4
   Fail-Fast, Actionable Errors

   stderr lacks a hint phrase. Looked for one of: try , use , expected , did you mean, see , run , for more, tip:, help:, hint:, suggestion:, available . Error messages must name what to do next, not just the symptom.

   Remediation · P4⧉ copy prompt

   Make helm satisfy P4 (Fail-Fast, Actionable Errors) from the agent-native CLI standard. Address:
   - Error messages include a hint or remediation phrase (stderr lacks a hint phrase. Looked for one of: try , use , expected , did you mean, see , run , for more, tip:, help:, hint:, suggestion:, available . Error messages must name what to do next, not just the symptom.)
   Requirements: https://anc.dev/p4

   fail
5. P5
   Safe Retries & Mutation Boundaries

   All 2 checks pass.

   pass
6. P6
   Composable, Predictable Command Structure

   pager referenced in --help but no --no-pager escape hatch advertised

   Remediation · P6⧉ copy prompt

   Make helm satisfy P6 (Composable, Predictable Command Structure) from the agent-native CLI standard. Address:
   - Pager-using CLI ships --no-pager escape hatch (pager referenced in --help but no --no-pager escape hatch advertised)
   Requirements: https://anc.dev/p6

   warn
7. P7
   Bounded, High-Signal Responses

   no `--verbose` / `-v` flag advertised. SHOULD-tier — agents debugging failures need a way to escalate diagnostic detail. · no TTY-aware language found in `--help`. MAY-tier — automatic verbosity reduction when stdout is piped or redirected lets agents skip the explicit `--quiet` flag. Behavioral probes cannot simulate a real TTY without a pty crate, so this audit relies on documented intent.

   Remediation · P7⧉ copy prompt

   Make helm satisfy P7 (Bounded, High-Signal Responses) from the agent-native CLI standard. Address:
   - `--verbose` flag for diagnostic escalation (no `--verbose` / `-v` flag advertised. SHOULD-tier — agents debugging failures need a way to escalate diagnostic detail.)
   - Help text advertises TTY-aware verbosity behavior (no TTY-aware language found in `--help`. MAY-tier — automatic verbosity reduction when stdout is piped or redirected lets agents skip the explicit `--quiet` flag. Behavioral probes cannot simulate a real TTY without a pty crate, so this audit relies on documented intent.)
   Requirements: https://anc.dev/p7

   warn
8. P8
   Discoverable Through Agent Skill Bundles

   All 3 checks pass.

   pass