gke-multitenancy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected in the instructions.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file path access, or unauthorized network operations were found. The examples use standard placeholders like 'team-a@example.com'.
- [OBFUSCATION]: No hidden content, Base64 encoding, zero-width characters, or homoglyph attacks were detected in the skill body or metadata.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill does not reference external packages or scripts for installation or execution. It provides standard Kubernetes YAML templates.
- [PRIVILEGE_ESCALATION]: No commands for unauthorized privilege escalation, such as 'sudo' or 'chmod 777', were found. The skill actively promotes least-privilege RBAC principles.
- [PERSISTENCE_MECHANISMS]: No attempts to maintain access across sessions, such as modifying shell profiles or creating scheduled tasks, were detected.
- [METADATA_POISONING]: The skill metadata (name, description, category) is accurate and consistent with the provided content.
- [INDIRECT_PROMPT_INJECTION]: The skill provides static configuration templates and does not possess an attack surface for ingesting or processing untrusted external data.
- [TIME_DELAYED_CONDITIONAL_ATTACKS]: No logic was found that gates behavior based on time, usage counters, or specific environmental conditions.
- [DYNAMIC_EXECUTION]: The skill does not generate, compile, or execute code dynamically at runtime.
- [DYNAMIC_CONTEXT_INJECTION]: No shell commands using the load-time execution syntax (!
command) were detected.
Audit Metadata