gke-networking
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external infrastructure configuration and Kubernetes resource data which represents a potential attack surface.
- Ingestion points: The skill utilizes tools such as
get_clusterandget_k8s_resource(referenced in SKILL.md) to import live cluster metadata and YAML manifests into the agent's context. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from interpreting data within the cluster resources as instructions.
- Capability inventory: The skill has the ability to modify infrastructure and apply new configurations using
update_clusterandapply_k8s_manifest(referenced in SKILL.md). - Sanitization: No sanitization or validation logic is present to filter content retrieved from the Kubernetes API before it is processed by the agent.
Audit Metadata