kube-agents-observability SKILL.md skillB

kube-agents-observability from gke-labs/kube-agents is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add gke-labs/kube-agents/kube-agents-observability@git:20261022.61cbc0a

Pins git:20261022.61cbc0a in mdr.lock. Pin the fingerprint instead.

Audit grade
B, 16 of 17 checks passed
Kind
SKILL.md skill
Repository
gke-labs/kube-agents
Path
agents/platform/skills/kube-agents-observability/SKILL.md
Versions recorded
11
Latest version
git:20261022.61cbc0a, committed Oct 22, 2026
First version recorded
Aug 12, 2026
Size
13,403 bytes
Repository stars
124
License
Apache-2.0

Audit, monitor, and debug the logging, tracing, metrics, and API/dashboard observability of the Platform Agent.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Task

Audit, verify, and troubleshoot the logging, metrics, and distributed tracing observability of the Platform Agent.

> [!TIP]
> The provided Python scripts in the `scripts/` subdirectory are parameterized reference implementations. When troubleshooting, you can run them directly, customize their parameters, or write custom just-in-time scripts/commands to query more specific metrics, endpoints, or time ranges as required by the task context.

> [!IMPORTANT]
> The helpers reach Google APIs through the credential broker and never hold a token: the Cloud Trace and Cloud Monitoring reads go through `credential_proxy_client.ApiSession` (see `scripts/google_api.py`), and the Cloud Logging read runs `gcloud logging read` through the broker's shim. Write a just-in-time script the same way. Do not fetch an access token and do not write an `Authorization` header yourself: the shim refuses a `gcloud` token fetch, the metadata server answers the sandbox with an identity IAM grants nothing, and whatever either returns lands in the transcript.

# Workflow

## Logging

### 1. Audit Agent Main Logs

- Verify that the main agent container is writing logs to `/opt/data/logs/*.log`.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add gke-labs/kube-agents/kube-agents-observability@sha256:dbed6b0092272e40

The line at the top of this page pins the label git:20261022.61cbc0a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_jdht3tnv6ifnkorv.svg)](https://markdownregistry.com/a/art_jdht3tnv6ifnkorv)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 11 versions of this file, between Aug 12, 2026 and Oct 22, 2026, about one every 7 days. Its first recorded version is graded A and its latest B.

versioncommittedcommitsizeaudit
git:20261022.61cbc0a latest2026-10-22 61cbc0a 13,403 BB view · diff
git:20261016.1d8dbd02026-10-16 1d8dbd0 13,357 BB view · diff
git:20261016.8e1c3e22026-10-16 8e1c3e2 13,062 BB view · diff
git:20261015.66b0dbc2026-10-15 66b0dbc 12,448 BB view · diff
git:20261009.60d40ac2026-10-09 60d40ac 11,819 BB view · diff
git:20261006.e9f5b2e2026-10-06 e9f5b2e 10,099 BB view · diff
git:20260915.90f2b622026-09-15 90f2b62 9,660 BB view · diff
git:20260910.211a62b2026-09-10 211a62b 9,004 BA view · diff
git:20260825.1795ec92026-08-25 1795ec9 8,912 BA view · diff
git:20260812.8e8a46c2026-08-12 8e8a46c 8,170 BA view · diff
git:20260812.e7192e62026-08-12 e7192e6 8,073 BA view

Audit of the latest version

B  16 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No link to a raw IP address (matched: http://127.0.0.1:9119)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (13403 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

gke-labs/kube-agents · 124 stars · license Apache-2.0 · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_jdht3tnv6ifnkorv
GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/kube-agents-observability
GET https://markdownregistry.com/api/v1/blob/dbed6b0092272e406c254e328c3b9a95ce36dafd1ad0ede90d7951ea85f8947c

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from gke-labs/kube-agents

edit-mirrored-skill SKILL.md skill
gke-labs/kube-agents · .agents/skills/edit-mirrored-skill/SKILL.md · Edit, sync or start mirroring a `gke-*` skill in `agents/platform/skills/` that is copied from google/skills. Use when…
git:20261016.ac3a849 · audit A · 124 stars
eval-fix-loop SKILL.md skill
gke-labs/kube-agents · .agents/skills/eval-fix-loop/SKILL.md · Take one failing eval case (or one root cause behind several), diagnose it from its recorded runs, classify the miss…
git:20261105.5fd8319 · audit A · 124 stars
install-kube-agents SKILL.md skill
gke-labs/kube-agents · .agents/skills/install-kube-agents/SKILL.md · Install, set up, or deploy kube-agents (the Kubernetes Agentic Harness) and its Platform Agent onto a GKE cluster in a…
git:20261105.ce5f74d · audit C · 124 stars
review-address-feedback SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-address-feedback/SKILL.md · Address review feedback on an open pull request: triage and fix findings, reply in every thread, resolve the addressed…
git:20261023.631dcf4 · audit A · 124 stars
review-adversarial SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-adversarial/SKILL.md · Reviews a change adversarially — establishes what it claims to do, hunts candidates from eleven angles, then re-derives…
git:20261023.b413863 · audit A · 124 stars
review-chat-ux SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-chat-ux/SKILL.md · Reviews a diff that changes what users read in Slack or Google Chat against the chat UX rules, and reports each…
git:20261105.db3b31b · audit A · 124 stars
review-docs-drift SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-docs-drift/SKILL.md · Reviews a pull request for documentation drift — finds which docs the change should have updated, verifies doc claims…
git:20261030.59401a3 · audit A · 124 stars
review-preflight SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-preflight/SKILL.md · Runs the pre-PR review passes — adversarial and docs-drift, required on every change, plus chat UX when chat output…
git:20261105.db3b31b · audit A · 124 stars
review-security-k8s-admission SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-admission/SKILL.md · Reviews Kubernetes Admission Control (Webhooks, VAP/MAP) for vulnerabilities.
git:20260522.4bbd4a0 · audit A · 124 stars
review-security-k8s-agents-audit-logs SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-audit-logs/SKILL.md · Reviews Kubernetes and application audit logging for AI agents, ensuring tamper-proof observability.
git:20260521.2bcbdef · audit A · 124 stars
review-security-k8s-agents-credentials SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-credentials/SKILL.md · Reviews AI agent Kubernetes configurations for credentials exposed to agents.
git:20260521.2bcbdef · audit A · 124 stars
review-security-k8s-agents-data-exfil SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-data-exfil/SKILL.md · Reviews Kubernetes configurations to prevent data exfiltration by AI agents.
git:20260521.2bcbdef · audit A · 124 stars

Every file in gke-labs/kube-agents

Browse by kind, by grade B, or by owner.