gke-workload-troubleshooting

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • Indirect Prompt Injection Surface: The skill processes external data which could potentially contain untrusted instructions. \n
  • Ingestion points: Data is read from kubectl logs, kubectl get events, gcloud logging read, and git log (SKILL.md, Step 2 and 3). \n
  • Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed data streams. \n
  • Capability inventory: The skill can execute kubectl, gcloud, and git commands, and has the ability to create GitHub Pull Requests (SKILL.md, Step 5). \n
  • Sanitization: No explicit sanitization or filtering of the ingested external content is described before it is processed by the agent.
  • Diagnostic Tool Usage: The skill uses kubectl and gcloud to inspect pod statuses, events, and logs. This is standard behavior for troubleshooting containerized applications on Google Cloud Platform and is restricted to the specific workload context.
  • GitOps Correction Workflow: Manifest fixes are proposed via Git branches and Pull Requests rather than direct cluster application. This maintains a clear audit trail and requires manual approval for changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 05:52 PM
Security Audit — agent-trust-hub — gke-workload-troubleshooting