The Agent Skills Directory

[Read-Only Diagnostic Design]: The skill is explicitly designed to be non-interactive and diagnostic. It systematically collects cluster configuration and IAM state to identify root causes, ensuring that no modifications to the environment are performed without human intervention.
[Standard Tool Integration]: The workflow leverages established command-line utilities such as gcloud and kubectl to retrieve diagnostic data. These operations occur within the user's existing authenticated context and are limited to metadata and configuration retrieval.
[Secure Metadata Interaction]: The skill includes connectivity checks to the standard Google Cloud metadata server (169.254.169.254). This is a legitimate diagnostic practice for verifying Workload Identity functionality and does not involve unauthorized external communication.
[Information Ingestion Surface]: The skill processes workload logs and metadata server logs to classify error signatures. While ingesting external data is a standard troubleshooting step, the skill maintains security by using this data only to provide context and suggested commands for the user.

gke-workload-identity