SkillTrust

← All skills

gke-workload-identity

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By gke-labs/kube-agents (GitHub) · devops · 126 stars · scanned at commit e9a8105

Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes ServiceAccount (KSA) to IAM binding (direct principal binding and legacy Google ServiceAccount impersonation), target-resource IAM roles, and gke-metadata-server health. Use when setti…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a devops skill.

Found in 7 places.

Show 4 more

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README. Expected for a devops skill.

Found in 1 place.

Other copies in this repository

gke-labs/kube-agents has 1 more folder with a skill named gke-workload-identity. This page shows the lowest-scoring copy.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'gke-workload-identity' ] || [ -L ~/.agents/skills/'gke-workload-identity' ]; then echo 'A skill folder named gke-workload-identity already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/gke-labs/kube-agents' "$d" && git -C "$d" checkout --quiet 'e9a8105f6fbd52d51780c0fa524f960463304bc0' -- 'agents/platform/skills/gke-workload-identity' && mkdir -p ~/.agents/skills && cp -R "$d"/'agents/platform/skills/gke-workload-identity' ~/.agents/skills/'gke-workload-identity' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'gke-workload-identity' ~/.claude/skills/'gke-workload-identity' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for gke-labs/kube-agents shows the score of its lowest-scoring skill.

SkillTrust badge for gke-labs/kube-agents

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/gke-labs/kube-agents.svg)](https://zalavijaysinh.github.io/skilltrust/repos/gke-labs/kube-agents/)

Score history

DateVersionScore
2026-11-13e9a810592
2026-11-0926dabb592
2026-11-072e7a07f92