gke-backup-dr
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Restore Safety and Resource Management: The skill manages GKE restore operations which can modify live cluster resources. It addresses this risk by detailing conflict policies and requiring explicit user confirmation before potentially destructive actions.
- Indirect Prompt Injection Surface: The skill processes Kubernetes manifests and secrets as part of its backup and restore workflows. Ingestion points include cluster metadata and resource configurations (SKILL.md), with capabilities to write back to the cluster (gcloud). Safety is maintained through explicit boundary markers (safety rules) and reliance on GKE API validation for data sanitization.
- Usage Attribution and Telemetry: The instructions include the use of specific environment variables and headers for usage attribution. This standard telemetry practice is restricted to terminal commands and is explicitly omitted from user-facing scripts or templates.
Audit Metadata