gke-workload-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Indirect Prompt Injection Surface: The skill processes external data which could potentially contain untrusted instructions. \n
- Ingestion points: Data is read from
kubectl logs,kubectl get events,gcloud logging read, andgit log(SKILL.md, Step 2 and 3). \n - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed data streams. \n
- Capability inventory: The skill can execute
kubectl,gcloud, andgitcommands, and has the ability to create GitHub Pull Requests (SKILL.md, Step 5). \n - Sanitization: No explicit sanitization or filtering of the ingested external content is described before it is processed by the agent.
- Diagnostic Tool Usage: The skill uses
kubectlandgcloudto inspect pod statuses, events, and logs. This is standard behavior for troubleshooting containerized applications on Google Cloud Platform and is restricted to the specific workload context. - GitOps Correction Workflow: Manifest fixes are proposed via Git branches and Pull Requests rather than direct cluster application. This maintains a clear audit trail and requires manual approval for changes.
Audit Metadata