gke-labsOfficial·43 Agent Skills Included

kube-agents

Autonomous GKE fleet management, security audits, and GitOps remediation

Manages Kubernetes and GKE fleets through proactive agents that audit security posture, troubleshoot workloads, and open pull requests with fixes. Eliminates manual kubectl toil, reactive incident response, and hand-rolled RBAC reviews across clusters. Covers cluster creation, upgrades, cost analysis, autoscaling, backup, and compliance through chat-driven delegation.

42|32

↗

npx skills add gke-labs/kube-agents --all -g -y

Available:

Instructs the agent on the repository layout, the Planning/Platform/Cluster agent roles, and the rules for delegating cluster work, running reviews, and handling pull requests safely.

All Skills in This Repository (43)

Pure Emerald Level Indicators

📦 In Repo

gke-labs

review-security-k8s-agents-sandbox

Audit Kubernetes AI agent sandboxes for code escape and lateral movement risks.

review-security-k8s-storage

Analyze Kubernetes storage configurations for security vulnerabilities and compliance.

review-security-k8s-pod

Analyze Kubernetes Pod security contexts for privilege escalation and workload isolation risks.

review-security-k8s-network

Analyze Kubernetes NetworkPolicies, Services, and Ingress for isolation gaps and exposure risks.

review-security-k8s-agents-firewall

Audit Kubernetes network policies and firewall rules for AI agent sandboxes.

review-security-k8s-nodes

Analyzes Kubernetes manifests for node boundary violations and privilege escalation risks.

review-security-k8s-agents-data-exfil

Audit Kubernetes network egress, RBAC, and volume mounts for data exfiltration risks.

review-security-k8s-agents-prompt-injection

Audit Kubernetes agent deployments for prompt injection vulnerabilities.

review-security-k8s-agents-audit-logs

Validate Kubernetes audit logging configurations for autonomous AI agent observability.

review-security-k8s-admission

Analyze Kubernetes admission webhooks and policies for security misconfigurations.

review-security-k8s-agents-main

Orchestrate parallel security audits across Kubernetes agent domains and produce a consolidated JSON report.

review-docs-drift

Compare pull request code changes against repository documentation maps to report drift.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install kube-agents?▼

Run `npx skills add gke-labs/kube-agents --all -g -y` in your terminal to install all skills in this suite globally.

What does kube-agents do for GKE clusters?▼

It deploys a Platform Agent that watches your GKE fleet around the clock, runs scheduled security and compliance audits, troubleshoots failing workloads, and proposes fixes as GitHub pull requests.

Can kube-agents change my cluster directly?▼

No. Agents are read-only against clusters by design; every infrastructure change flows through a reviewed GitOps pull request, and credentials are isolated behind a proxy sidecar.

How do I troubleshoot a crashing GKE workload?▼

Ask the agent in chat; the Planning Agent delegates the diagnosis to that cluster's read-only Cluster Agent, which returns a root-cause analysis and a proposed manifest patch.

Does kube-agents work with Slack and Google Chat?▼

Yes. The harness integrates with Google Chat and Slack so you can delegate fleet operations and receive audit reports directly in chat threads.