install-kube-agents SKILL.md skillC

install-kube-agents from gke-labs/kube-agents is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add gke-labs/kube-agents/install-kube-agents@git:20261029.4ef8c38

Pins git:20261029.4ef8c38 in mdr.lock. Pin the fingerprint instead.

Audit grade
C, 15 of 17 checks passed
Kind
SKILL.md skill
Repository
gke-labs/kube-agents
Path
.agents/skills/install-kube-agents/SKILL.md
Versions recorded
35
Latest version
git:20261029.4ef8c38, committed Oct 29, 2026
First version recorded
Sep 10, 2026
Size
83,328 bytes
Repository stars
120
License
Apache-2.0

Install, set up, or deploy kube-agents (the Kubernetes Agentic Harness) and its Platform Agent onto a GKE cluster in a GCP project, interactively or non-interactively. Use when asked to install, bootstrap, or onboard kube-agents, or to plan one with a dry run.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# `install-kube-agents` Skill

Install `kube-agents` for an operator: detect their environment and interview them for the choices
that shape the install, preview it with `--dry-run`, and apply only after they confirm. Follow
[Install workflow](#install-workflow).

## What `install.sh` actually does

It is a front-end, not a second provisioner. It loads `install.env` (the install's
hand-authored configuration), collects anything still missing, generates
`terraform/examples/full-install/terraform.tfvars` from the result, and then runs the composition's
`lifecycle.sh apply` — the Terraform root in
[`terraform/examples/full-install/`](../../../terraform/examples/full-install/README.md) owns every
GCP resource and installs the Helm chart (`charts/kube-agents`) that owns every Kubernetes one.
The chart installs the operator and the `PlatformAgent` into the `kubeagents-system` namespace
(`DEFAULT_NAMESPACE`; `--agent-namespace` overrides it).
Terraform state goes to a GCS bucket (`<project>-kube-agents-tfstate`, versioned, prefix
`kube-agents/<cluster>`), so `uninstall.sh` and `upgrade.sh` can find the install from a fresh
clone. The installer sources
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add gke-labs/kube-agents/install-kube-agents@sha256:51a743fa867a5795

The line at the top of this page pins the label git:20261029.4ef8c38, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_uip6bfmd7myl7hjv.svg)](https://markdownregistry.com/a/art_uip6bfmd7myl7hjv)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 35 versions of this file, between Sep 10, 2026 and Oct 29, 2026, about one every day. Its first recorded version is graded B and its latest C.

versioncommittedcommitsizeaudit
git:20261029.4ef8c38 latest2026-10-29 4ef8c38 83,328 BC view · diff
git:20261027.4f0868f2026-10-27 4f0868f 80,538 BC view · diff
git:20261023.0918e062026-10-23 0918e06 78,197 BC view · diff
git:20261022.a7254422026-10-22 a725442 77,890 BC view · diff
git:20261020.61735a12026-10-20 61735a1 77,801 BC view · diff
git:20261020.83f98e52026-10-20 83f98e5 77,801 BC view · diff
git:20261020.c851baa2026-10-20 c851baa 77,175 BC view · diff
git:20261017.11c5a692026-10-17 11c5a69 75,350 BC view · diff
git:20261016.adf067f2026-10-16 adf067f 71,347 BC view · diff
git:20261016.8aab9a02026-10-16 8aab9a0 71,347 BC view · diff
git:20261015.2471b532026-10-15 2471b53 67,766 BB view · diff
git:20261015.9fa06fc2026-10-15 9fa06fc 67,387 BC view · diff
git:20261014.1f9b84b2026-10-14 1f9b84b 63,936 BC view · diff
git:20261014.92f9cd42026-10-14 92f9cd4 63,904 BC view · diff
git:20261013.c198a912026-10-13 c198a91 56,059 BC view · diff
git:20261009.7d6ca982026-10-09 7d6ca98 56,059 BC view · diff
git:20261008.8ad52eb2026-10-08 8ad52eb 55,540 BC view · diff
git:20261006.fcd50042026-10-06 fcd5004 55,003 BC view · diff
git:20261006.a233f672026-10-06 a233f67 54,945 BC view · diff
git:20261003.b09e8722026-10-03 b09e872 53,907 BC view · diff
git:20261001.ceee29a2026-10-01 ceee29a 53,388 BC view · diff
git:20260930.aefff452026-09-30 aefff45 53,346 BC view · diff
git:20260929.488f00e2026-09-29 488f00e 49,809 BC view · diff
git:20260928.be823912026-09-28 be82391 42,038 BC view · diff
git:20260928.74b0b242026-09-28 74b0b24 40,133 BC view · diff
git:20260926.a45b02d2026-09-26 a45b02d 39,398 BC view · diff
git:20260924.e1184132026-09-24 e118413 37,258 BB view · diff
git:20260923.b7399af2026-09-23 b7399af 37,119 BB view · diff
git:20260922.daa299b2026-09-22 daa299b 35,467 BB view · diff
git:20260918.a5d6d972026-09-18 a5d6d97 31,557 BB view · diff
git:20260916.1b3fc482026-09-16 1b3fc48 27,238 BB view · diff
git:20260911.5a0648a2026-09-11 5a0648a 22,818 BB view · diff
git:20260911.0d83c582026-09-11 0d83c58 21,677 BB view · diff
git:20260910.5a7b0eb2026-09-10 5a7b0eb 20,482 BB view · diff
git:20260910.6b7545a2026-09-10 6b7545a 19,604 BB view

Audit of the latest version

C  15 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • fail: No curl or wget piped into a shell (matched: curl | bash)
  • fail: No instruction to read or print local credentials (matched: read the forge from `install.env)
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (83328 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No recursive delete of root, home or parent
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.

Source

GitHub

gke-labs/kube-agents · 120 stars · license Apache-2.0 · pushed 2026-11-01 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_uip6bfmd7myl7hjv
GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/install-kube-agents
GET https://markdownregistry.com/api/v1/blob/51a743fa867a5795e8b50ddae38e4db89f97acdb20f5d50bdb07a1e4f83aa87f

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from gke-labs/kube-agents

edit-mirrored-skill SKILL.md skill
gke-labs/kube-agents · .agents/skills/edit-mirrored-skill/SKILL.md · Edit, sync or start mirroring a `gke-*` skill in `agents/platform/skills/` that is copied from google/skills. Use when…
git:20261016.ac3a849 · audit A · 120 stars
review-address-feedback SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-address-feedback/SKILL.md · Address review feedback on an open pull request: triage and fix findings, reply in every thread, resolve the addressed…
git:20261023.631dcf4 · audit A · 120 stars
review-adversarial SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-adversarial/SKILL.md · Reviews a change adversarially — establishes what it claims to do, hunts candidates from eleven angles, then re-derives…
git:20261023.b413863 · audit A · 120 stars
review-docs-drift SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-docs-drift/SKILL.md · Reviews a pull request for documentation drift — finds which docs the change should have updated, verifies doc claims…
git:20261030.59401a3 · audit A · 120 stars
review-preflight SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-preflight/SKILL.md · Runs the review passes required before a pull request is opened — adversarial and docs-drift — each in a context that…
git:20261027.d053bac · audit A · 120 stars
review-security-k8s-admission SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-admission/SKILL.md · Reviews Kubernetes Admission Control (Webhooks, VAP/MAP) for vulnerabilities.
git:20260522.4bbd4a0 · audit A · 120 stars
review-security-k8s-agents-audit-logs SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-audit-logs/SKILL.md · Reviews Kubernetes and application audit logging for AI agents, ensuring tamper-proof observability.
git:20260521.2bcbdef · audit A · 120 stars
review-security-k8s-agents-credentials SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-credentials/SKILL.md · Reviews AI agent Kubernetes configurations for credentials exposed to agents.
git:20260521.2bcbdef · audit A · 120 stars
review-security-k8s-agents-data-exfil SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-data-exfil/SKILL.md · Reviews Kubernetes configurations to prevent data exfiltration by AI agents.
git:20260521.2bcbdef · audit A · 120 stars
review-security-k8s-agents-firewall SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-firewall/SKILL.md · Reviews Kubernetes network and firewall configurations specifically for AI agent execution sandboxes.
git:20260903.799c7e3 · audit A · 120 stars
review-security-k8s-agents-main SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-main/SKILL.md · Orchestrates comprehensive Kubernetes security audits specifically tailored for AI agent workloads.
git:20260522.4bbd4a0 · audit A · 120 stars
review-security-k8s-agents-prompt-injection SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-prompt-injection/SKILL.md · Reviews AI agent architectures (API gateways, WAFs, input sanitization) for prompt injection risks.
git:20260521.2bcbdef · audit A · 120 stars

Every file in gke-labs/kube-agents

Browse by kind, by grade C, or by owner.