gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation for executing standard CLI tools including
gcloud,docker, andterraform. These commands are used for building container images and managing Google Cloud infrastructure. - [PRIVILEGE_ESCALATION]: The Terraform and CLI examples demonstrate how to grant public access to Cloud Run services using the
allUsersmember for theroles/run.invokerrole. This is a high-privilege but standard configuration for public-facing internet services. - [INDIRECT_PROMPT_INJECTION]: The
scripts/validate-config.shscript takes a configuration file as an input argument, representing an entry point for external data. - Ingestion points: The first command-line argument
$1inscripts/validate-config.shwhich is stored in theCONFIG_FILEvariable. - Boundary markers: None implemented in the provided shell script template.
- Capability inventory: The skill describes capabilities for infrastructure deployment and resource management via GCP and Terraform providers.
- Sanitization: The script uses
set -euo pipefailfor basic bash error handling, and the file contains placeholders for further validation logic.
Audit Metadata