submit-suggestion skillA
submit-suggestion is agent-read markdown (skill) from gke-labs/kube-agents: Propose declarative configuration updates securely by committing file changes and submitting GitHub Pull Requests (PRs) for SRE review. Not for fleet-audit finding fixes — the fleet-audit skill opens and tracks those PRs itself..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# submit-suggestion - Secure GitOps Pull Request Orchestrator This skill equips the Platform Agent to propose declarative file updates, GKE infrastructure adjustments, or configuration changes securely by committing local repository changes and submitting GitHub Pull Requests (PRs) for human review. ## When to Use - **Declarative File Provisioning:** Triggered when new GKE manifests or configs are requested. - **Configuration Upgrades:** Triggered when upgrading version configurations, security patches, or network policies. - **Governance Policy Syncs:** Triggered when compliance playbooks or settings require updates. _Crucially, you are strictly forbidden from executing direct, manual mutations. All changes must flow through a secure PR path — this skill, or the **fleet-audit** skill for fixes of its findings (below)._ ## When NOT to Use - **Fixing a fleet-audit finding.** The bullets above match audit fixes too — a security patch, a policy update — which is exactly why this warning exists. If the change addresses a fleet-audit finding (it carries a finding id, or an `[audit]` ledger issue lists that exact deviation as a finding), the …
Read the whole file at its exact version.
How to install
mdr add gke-labs/kube-agents/submit-suggestion@git:20260917.a6d2a0cmdr add gke-labs/kube-agents/submit-suggestion@sha256:114dc2937d4d8407Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_bvrp33xvnovcknee)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260917.a6d2a0c latest | 2026-09-17 | a6d2a0c | 14,431 B | A | view · diff |
| git:20260911.ff87fd1 | 2026-09-11 | ff87fd1 | 14,022 B | A | view · diff |
| git:20260905.f66d195 | 2026-09-05 | f66d195 | 12,398 B | A | view · diff |
| git:20260901.a6904de | 2026-09-01 | a6904de | 10,019 B | A | view · diff |
| git:20260819.72c1813 | 2026-08-19 | 72c1813 | 9,691 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (14431 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gke-labs/kube-agents · 64 stars · license Apache-2.0 · pushed 2026-09-23 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_bvrp33xvnovcknee GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/submit-suggestion GET https://markdownregistry.com/api/v1/blob/114dc2937d4d8407b88cdc517bd3f593b52aa646757cc9d27d7412a66e2c8577
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.