gke-node-notready
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes standard tools like
kubectlandgcloudto interact with Kubernetes clusters and retrieve diagnostic information. These operations are conducted within a defined "read-only diagnostics boundary," ensuring that the agent gathers evidence without performing unauthorized mutations to the cluster environment. - External References: The skill generates deep links to the Google Cloud Console (
console.cloud.google.com) to facilitate log analysis. These links point to official vendor infrastructure and are used to provide the user with direct access to evidence supporting the diagnosis. - Indirect Prompt Injection Surface: The skill analyzes external data such as Kubernetes events and kubelet logs, which is a necessary component of its diagnostic function.
- Ingestion points: External data enters the agent context via
kubectl get/describecommands and log queries described inSKILL.md. - Boundary markers: The skill explicitly instructs the agent to operate non-interactively and enforces a requirement that a human user must apply any proposed fixes.
- Capability inventory: The skill utilizes
kubectlandgcloudfor information gathering and credential management. - Sanitization: The skill relies on human oversight and manual verification of the diagnostic findings and proposed commands rather than automated filtering of log content.
Audit Metadata