gke-workload-security
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill includes a local shell script (
scripts/audit_cluster.sh) used to query the configuration of a GKE cluster using thegcloudCLI. This is a standard administrative function for auditing security posture. - [Identity and Access Management]: The workflows for Workload Identity involve using
gcloud iamcommands to bind Kubernetes service accounts to Google service accounts. This represents a security improvement over using static long-lived credentials. - [Network Security]: The skill provides a standard Kubernetes
NetworkPolicyto implement a default-deny posture, which is a recommended security hardening step to reduce the attack surface of containerized workloads. - [Vendor Resource Integration]: The skill utilizes official Google Cloud images (
gcr.io/google.com/cloudsdktool/cloud-sdk) and references official documentation atcloud.google.com. These are trusted sources for GKE management and do not introduce external dependencies.
Audit Metadata