gke-basics
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Indirect Prompt Injection Considerations]: The skill includes tools to read cluster logs and events, such as
get_k8s_logsandlist_k8s_events(found inreferences/mcp-usage.md). These ingestion points could theoretically be exposed to instructions embedded in workload outputs. While the skill does not explicitly define boundary markers or sanitization logic for this data, it is used for necessary diagnostic capabilities and is combined with administrative actions likeapply_k8s_manifestto manage the cluster environment. - [Command Execution]: Instructions for using
kubectl execandkubectl run debugare provided as fallback measures inreferences/cli-reference.md. These tools enable direct shell access to containerized environments, which is a core requirement for GKE administrators when troubleshooting complex issues that cannot be resolved through higher-level interfaces. - [External Downloads]: The skill references standard client libraries such as
kubernetesand@kubernetes/client-node, along with official documentation from Google Cloud and Hashicorp. These dependencies originate from trusted organizations and well-known registries, representing standard practice for infrastructure management tasks.
Audit Metadata