gke-custom-golden-image-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Resource Access: The skill utilizes
curlto fetch JSON mapping files from a Google-owned domain (gstatic.com). This is a standard procedure for retrieving official GKE image metadata and uses a trusted service provider. - Data Processing Considerations: The skill interprets user-provided information (such as GKE version and hardware requirements) to dynamically select the correct mapping file and filter the results.
- Ingestion points: Technical specifications and context clues are extracted from user prompts.
- Boundary markers: The instructions do not define specific delimiters for separating user input from the search logic.
- Capability inventory: The skill performs read-only network operations to fetch configuration data and processes it locally; it does not exhibit file-writing or code-execution capabilities.
- Sanitization: The discovery workflow includes a step to validate the GKE version and inform users if the input is unsupported, which helps ensure the integrity of the data retrieval process.
Audit Metadata