gke-app-onboarding
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [Security-Conscious Containerization]: The skill emphasizes the use of multi-stage builds and minimal base images (e.g., distroless). The provided examples demonstrate running processes as a non-root user, which is a key security measure to limit the impact of potential container escapes.
- [Hardened Kubernetes Manifests]: The sample deployment configuration includes robust security settings, such as
readOnlyRootFilesystem,allowPrivilegeEscalation: false, and dropping all capabilities. It also ensures operational stability through mandatory resource requests and health probes. - [Usage Attribution Mechanism]: The skill uses specific environment variables and header modifications to track skill usage. This process is documented as carrying no user data and is a standard method for monitoring vendor-provided tools.
- [Trusted Resource Acquisition]: All external tools and images, such as Cloud Native Buildpacks and Google Cloud SDK commands, are sourced from official and well-known registries, ensuring the integrity of the onboarding workflow.
Audit Metadata