auditing-gcp-iam-permissions
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official Google Cloud CLI tools (
gcloud) and APIs to retrieve IAM configuration data. These operations are standard for security auditing and adhere to GCP's security model. - [SAFE]: All data processing is executed locally using
python3 -csnippets to filter and format JSON output from the CLI. This logic is transparent and does not involve remote code execution, dynamic code generation from untrusted sources, or exfiltration. - [SAFE]: Remediation steps, such as modifying IAM policy bindings and disabling service accounts, are consistent with the skill's intended purpose of improving cloud security and are documented for user execution after an audit.
Audit Metadata