gcp-gke-workload-identity
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Bash tools to run Google Cloud and Kubernetes commands for configuration.
- Evidence: Executes
gcloud iam service-accountsandgcloud projects add-iam-policy-bindingto set up security credentials. - Evidence: Uses
kubectl applyandkubectl execto manage and verify Kubernetes resources. - [SAFE]: No security threats were identified; the skill follows established Google Cloud best practices for keyless authentication.
- Evidence: Recommends Workload Identity to eliminate the risk of static service account keys.
- Evidence: References the Cloud SQL Proxy from a well-known, trusted source (
gcr.io/cloud-sql-connectors/cloud-sql-proxy).
Audit Metadata