cost-gcp

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard gcloud CLI commands to retrieve pricing, billing, and resource information from a user's GCP environment. These are routine administrative operations within the context of cloud cost management.
  • [EXTERNAL_DOWNLOADS]: Recommends installing the official Google Cloud SDK and legitimate Model Context Protocol (MCP) servers (mcp-server-gcp) using established tools like Homebrew and uvx. All referenced download sources are official or well-known developer utilities.
  • [DATA_EXFILTRATION]: Uses curl to fetch pricing data directly from official Google Cloud API endpoints (cloudbilling.googleapis.com). Authentication is handled securely using locally generated bearer tokens via gcloud auth print-access-token, adhering to industry best practices for local credential management.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 07:44 AM
Security Audit — agent-trust-hub — cost-gcp