gke-workload-security
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill uses
gcloudandkubectlto perform cluster audits and apply security configurations. These are standard tools for managing GKE environments and are used here to retrieve cluster metadata and apply hardening policies. - [Service Account Management]: The
scripts/audit_cluster.shscript andSKILL.mdinstructions guide the user through setting up Workload Identity. This is a security best practice that replaces static credentials with short-lived, identity-based access for Kubernetes workloads. - [Network Isolation]: The skill includes assets for implementing a 'default-deny' network policy, which is a standard method for enforcing zero-trust networking within a Kubernetes namespace.
- [Verified Source Recognition]: The skill references official Google Cloud documentation and uses container images from official Google Cloud registries (gcr.io/google.com/cloudsdktool), which are trusted sources for GKE management tools.
Audit Metadata