gcp-fullstack
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a comprehensive set of CLI tools (
gcloud,npm,npx,docker,git,gh) to automate infrastructure management and application deployment. It implements safety guidelines such as mandatory user confirmation for destructive operations (e.g., deleting databases or services) and ensuring that infrastructure health checks during the QA phase are strictly read-only. - [EXTERNAL_DOWNLOADS]: The skill interacts with well-known external services including the Cloudflare API for DNS/security management and the OpenRouter API for LLM-based quality evaluation. It also facilitates the installation of standard industry-standard dependencies from the NPM registry during project scaffolding. These downloads are performed as part of documented development workflows.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through its 'LLM-as-judge' feature, which evaluates the output of the developed application using an external model. This is mitigated by a multi-layered validation approach that includes rule-based checks performed before the LLM evaluation to catch common issues.
Audit Metadata