{"identifier":"urn:ai:org.agntcy:cid:baeareicq4sx33kd5b5bq7bxtu265oh7syenaa4he3m4ifeytmqltdomb7a", "displayName":"gke-workload-security", "mediaType":"application/agent-skills+gzip", "type":"application/agent-skills+gzip", "data":{"artifacts":[{"artifact_hash":"sha256:377070f31145a9a8c60d722f6341315b08b6ebca705de2ce5359221b9794aad0", "path":"assets/default-deny-netpol.yaml", "type":"asset"}, {"artifact_hash":"sha256:a4894f438f56f48ea03d2ffebcb04028bd13d7cdcb7e5f02047cc90dfb35a3ab", "path":"assets/workload-identity-pod.yaml", "type":"asset"}, {"artifact_hash":"sha256:ee3a9a02dc9773a7aa27998ed55e5b464b5e0dc6731ea17e3a253bfed46bdbfb", "path":"scripts/audit_cluster.sh", "type":"script"}], "skill_file":"SKILL.md", "skill_manifest":{"description":"Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).", "frontmatter_metadata":{"category":"Security", "version":"1.0.0"}, "name":"gke-workload-security", "version":"1.0.0"}}, "version":"1.0.0", "description":"Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).", "tags":["oasf:1.1.0:domains:technology/cloud_computing/gcp", "oasf:1.1.0:domains:technology/security", "oasf:1.1.0:skills:cybersecurity/identity_access_management/authorization_access_control", "oasf:1.1.0:skills:cybersecurity/security_operations/security_hardening"], "trustManifest":{"identity":"urn:ai:org.agntcy:cid:baeareicq4sx33kd5b5bq7bxtu265oh7syenaa4he3m4ifeytmqltdomb7a", "identityType":"did", "attestations":[{"type":"publisher-identity", "uri":"data:application/vnd.dev.sigstore.bundle.v0.3+json;base64,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", "mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json", "digest":"sha256:e07fea53d2c56beb0b209ae8f2c3b7ed2e21d5199c0f9c206c82918a5070d528", "size":"10291", "description":"Verified signature by urn:ai:org.agntcy:signer:oidc:CN=sigstore-intermediate,O=sigstore.dev:token.actions.githubusercontent.com:github.com/agntcy/dir/.github/workflows/import-records.yaml@refs/heads/main"}], "provenance":[{"relation":"derivedFrom", "sourceId":"urn:ai:org.agntcy:signer:oidc:CN=sigstore-intermediate,O=sigstore.dev:token.actions.githubusercontent.com:github.com/agntcy/dir/.github/workflows/import-records.yaml@refs/heads/main", "signatureRef":"sha256:e07fea53d2c56beb0b209ae8f2c3b7ed2e21d5199c0f9c206c82918a5070d528"}], "metadata":{}}, "updatedAt":"2026-09-28T00:22:33Z", "metadata":{"agntcy.dir.security.v1.ScanResult":{"isSafe":true, "maxSeverity":"INFO", "reports":[{"isSafe":true, "maxSeverity":"INFO", "scannerType":"SKILL", "updatedAt":"2026-09-28T03:02:37Z"}]}, "agntcy.dir.trust.v1.Status":{"trusted":true, "verified":false}, "agntcy.dir.usage.v1.Metrics":{"lookupCount":1, "providerCount":1, "pullCount":0}}}