gke-ai-troubleshooting-tpu-dynamic-slices-monitoring
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill provides instructions to execute several administrative commands using
kubectlandgcloud. While these are powerful operations that can modify cluster resources or configurations, they are presented as part of an explicit troubleshooting and management workflow for GKE TPU environments. - [Resource Finalizer Removal]: The skill includes instructions to remove Kubernetes finalizers using a JSON patch operation (
kubectl patch slice ... --type json -p='[{"op": "remove", "path": "/metadata/finalizers"}]'). Removing finalizers is a sensitive action that can lead to orphaned resources if not managed correctly. However, the skill provides a specific safety mandate requiring the agent to warn the user and seek explicit confirmation before proceeding. - [Controller Management]: The skill contains procedures for disabling the GKE TPU Slice controller and deleting Custom Resource Definitions (CRDs). These are destructive operations used for cleaning up or resetting the environment. The skill follows best practices by instructing the agent to confirm these actions with the user before execution.
Audit Metadata