skills/google/skills/gke-basics/Gen Agent Trust Hub

gke-basics

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Indirect Prompt Injection Considerations]: The skill includes tools to read cluster logs and events, such as get_k8s_logs and list_k8s_events (found in references/mcp-usage.md). These ingestion points could theoretically be exposed to instructions embedded in workload outputs. While the skill does not explicitly define boundary markers or sanitization logic for this data, it is used for necessary diagnostic capabilities and is combined with administrative actions like apply_k8s_manifest to manage the cluster environment.
  • [Command Execution]: Instructions for using kubectl exec and kubectl run debug are provided as fallback measures in references/cli-reference.md. These tools enable direct shell access to containerized environments, which is a core requirement for GKE administrators when troubleshooting complex issues that cannot be resolved through higher-level interfaces.
  • [External Downloads]: The skill references standard client libraries such as kubernetes and @kubernetes/client-node, along with official documentation from Google Cloud and Hashicorp. These dependencies originate from trusted organizations and well-known registries, representing standard practice for infrastructure management tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:49 PM
Security Audit — agent-trust-hub — gke-basics