devops

Fail

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Fetches and executes the Google Cloud SDK installation script from Google's official domain (sdk.cloud.google.com) using a piped-to-shell pattern (curl | bash). This is the vendor-provided method for automated installation.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides implementation patterns for web scrapers and crawlers that ingest untrusted data from external URLs and process it with LLMs, creating a surface for indirect prompt injection.
  • Ingestion points: Data enters the context via Puppeteer's page.content() in references/browser-rendering.md and references/cloudflare-workers-advanced.md.
  • Boundary markers: The code examples lack explicit delimiters or instructions to the model to treat the fetched content purely as data rather than instructions.
  • Capability inventory: The code demonstrates capabilities for further network requests (crawling), message queuing (env.QUEUE.send), and direct LLM interaction (env.AI.run).
  • Sanitization: No sanitization or content filtering is implemented for the scraped HTML content before it is processed by the AI.
  • [PRIVILEGE_ESCALATION]: Documentation for installing the Google Cloud CLI on Linux systems includes commands requiring sudo privileges for package management (sudo apt-get install). This is standard behavior for system-level tool installation and maintenance.
Recommendations
  • HIGH: Downloads and executes remote code from: https://sdk.cloud.google.com - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 6, 2026, 02:02 PM