devops
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the Google Cloud SDK from official Google domains using
curl https://sdk.cloud.google.com | bash. - [COMMAND_EXECUTION]: The
scripts/cloudflare_deploy.pyutility automates Worker deployments by executing thewranglerCLI viasubprocess.run. The implementation uses structured argument lists to ensure safe execution. - [PRIVILEGE_ESCALATION]: Setup instructions for the Google Cloud CLI on Linux systems include the use of
sudofor installing system packages throughapt-get. - [INDIRECT_PROMPT_INJECTION]: The skill features scripts that ingest and analyze project configuration files, representing a potential indirect prompt injection surface:
- Ingestion points:
scripts/cloudflare_deploy.pyreadswrangler.toml;scripts/docker_optimize.pyreads Dockerfile content. - Capability inventory: The deployment utility has the capability to execute shell commands and perform local file operations.
- Sanitization: Command execution relies on structured argument lists rather than raw shell strings, and parsed metadata is used primarily for logging.
- [SAFE]: Sensitive credential management is handled appropriately through the use of
.env.exampletemplates, ensuring that API tokens and service account keys are not hardcoded or accidentally committed to version control.
Audit Metadata