gke-labs
Official@gke-labs
Specialized security auditing and infrastructure management for Google Kubernetes Engine environments, focusing on workload isolation, RBAC hardening, and cluster lifecycle governance.
Agent Skills by gke-labs
Showing 47 vetted skills indexed across 2 GitHub repositories.
gke-labsreview-security-k8s-agents-sandbox
Audit Kubernetes AI agent sandboxes for code escape and lateral movement risks.
gke-labsreview-security-k8s-storage
Analyze Kubernetes storage configurations for security vulnerabilities and compliance.
gke-labsreview-security-k8s-pod
Analyze Kubernetes Pod security contexts for privilege escalation and workload isolation risks.
gke-labsreview-security-k8s-network
Analyze Kubernetes NetworkPolicies, Services, and Ingress for isolation gaps and exposure risks.
gke-labsreview-security-k8s-agents-firewall
Audit Kubernetes network policies and firewall rules for AI agent sandboxes.
gke-labsreview-security-k8s-nodes
Analyzes Kubernetes manifests for node boundary violations and privilege escalation risks.
gke-labsreview-security-k8s-agents-data-exfil
Audit Kubernetes network egress, RBAC, and volume mounts for data exfiltration risks.
gke-labsreview-security-k8s-agents-prompt-injection
Audit Kubernetes agent deployments for prompt injection vulnerabilities.
gke-labsreview-security-k8s-agents-audit-logs
Validate Kubernetes audit logging configurations for autonomous AI agent observability.
gke-labsreview-security-k8s-admission
Analyze Kubernetes admission webhooks and policies for security misconfigurations.
gke-labsreview-security-k8s-agents-main
Orchestrate parallel security audits across Kubernetes agent domains and produce a consolidated JSON report.
gke-labsreview-docs-drift
Compare pull request code changes against repository documentation maps to report drift.
gke-labsreview-security-k8s-service-accounts
Analyze Kubernetes ServiceAccount configurations for least privilege and secure identity boundaries.
gke-labsreview-security-k8s-understand
Analyze Kubernetes architecture and resources to build security review context.
gke-labsreview-security-k8s-main
Coordinates parallel security sub-agents to audit Kubernetes infrastructure and vulnerabilities into a JSON report.
gke-labsreview-security-k8s-gateway
Analyze Kubernetes Gateway API configurations for security vulnerabilities and namespace isolation.
gke-labsreview-security-k8s-namespaces
Analyze Kubernetes namespace configurations to enforce workload isolation and boundary defense.
gke-labsreview-security-k8s-rbac
Analyze Kubernetes RBAC manifests and live clusters for privilege escalation risks.
gke-labsskill-review
Audit SKILL.md files for token efficiency and structural compliance.
gke-labsreview-security-k8s-agents-credentials
Analyze Kubernetes manifests for AI agent credential and RBAC security vulnerabilities.
gke-labsgke-observability
Audit and configure logging, monitoring, and tracing for Google Kubernetes Engine clusters.
gke-labsgke-workload-troubleshooting
Diagnose GKE workload failures by analyzing pod states, namespace events, and application logs.
gke-labsgke-reliability
Configure and validate high availability settings for GKE clusters and Kubernetes workloads.
gke-labsgke-storage
Configure GKE storage classes and CSI drivers for persistent volumes.
Frequently Asked Questions About gke-labs
FAQPage SchemaWhat specific security tasks can be performed using these capabilities?▼
These capabilities enable comprehensive security audits of Kubernetes manifests, including RBAC privilege escalation checks, network policy validation, storage configuration analysis, and detection of data exfiltration risks within agent sandboxes.
Which technical personas benefit most from these security audits?▼
Platform engineers, site reliability engineers, and security architects managing Google Kubernetes Engine environments benefit from these audits to ensure workload isolation, compliance with least-privilege principles, and secure infrastructure configuration.
What are the primary prerequisites for running these security audits?▼
Users require access to Kubernetes manifest files or live cluster environments, along with appropriate permissions to read resource configurations, audit logs, and network policies to generate the required security assessment reports.