gke-golden-path
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [GKE Security Best Practices]: The skill defaults to highly secure configurations, such as
enablePrivateNodes,workloadIdentityConfig, andshieldedInstanceConfig. These settings align with industry standards for hardening Kubernetes environments. - [Credential Safety]: The instructions explicitly forbid the agent from requesting or outputting secrets like tokens or service account JSON, which is a key security guardrail.
- [Transparency and Rationale]: The skill requires the agent to document decisions and explain trade-offs when deviating from the 'golden path,' ensuring that security implications of configuration changes are clear to the user.
- [Upgrade Disruption Awareness]: It provides realistic guidance on node upgrades and PodDisruptionBudgets, preventing the agent from making false security or availability claims regarding zero-downtime upgrades.
Audit Metadata