skills/google/skills/gke-upgrades/Gen Agent Trust Hub

gke-upgrades

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFE
Full Analysis
  • [Standard Administrative Tooling]: The skill relies on established command-line utilities such as gcloud and kubectl to interact with Google Kubernetes Engine. These are the industry-standard tools for cluster management and are used according to their intended design.
  • [Official Vendor Documentation]: External resources and documentation links point exclusively to official provider domains (cloud.google.com) and well-known image registries (nvcr.io). These are trusted sources for the technical information and assets required for the skill's purpose.
  • [Operational Safety and Integrity]: The instructions include best-practice safety measures, such as creating backups of Pod Disruption Budgets (PDBs) and admission webhook configurations before modification. The runbooks emphasize the mandatory restoration of these safety controls after an operation is complete to maintain cluster resilience.
  • [Purpose-Aligned Capabilities]: While the skill includes commands that modify cluster state (such as updating node pools or temporarily relaxing PDBs), these actions are central to its primary function of managing cluster upgrades. The instructions correctly flag these as sensitive operations and provide structured ways to handle them safely.
  • [No Malicious Patterns Detected]: The analysis found no indicators of prompt injection, unauthorized data exfiltration, obfuscation, or persistence mechanisms. The skill operates within the scope of documented GKE lifecycle management.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:50 AM