gcp-cloud-functions
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download the Google Cloud SDK from its official distribution domain at sdk.cloud.google.com.
- [REMOTE_CODE_EXECUTION]: The SKILL.md and reference guides contain commands to install the Google Cloud SDK by piping a remote script to the shell. This is a standard installation procedure for official developer tools from established cloud providers.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a shell script for validating infrastructure configurations, which represents a surface for processing external data.
- Ingestion points: The scripts/validate-config.sh script accepts a file path as a command-line argument to process local configuration files.
- Boundary markers: Not present in the current script skeleton.
- Capability inventory: The script is a bash skeleton using basic shell commands; no file-writing, network operations, or dynamic code execution are present.
- Sanitization: None present in the provided template script.
Audit Metadata