gcloud
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with official Google Cloud API endpoints (run.googleapis.com, cloudfunctions.googleapis.com, monitoring.googleapis.com, logging.googleapis.com) to fetch service status and metrics. These are categorized as well-known and trusted services.
- [DATA_EXPOSURE]: Sensitive identifiers and credentials, such as 'GOOGLE_APPLICATION_CREDENTIALS_JSON' and 'BIGQUERY_PROJECT_ID', are sourced from environment settings. This is a secure and standard implementation for handling authentication in AI agent skills.
- [INDIRECT_PROMPT_INJECTION]: The skill can ingest external data through log retrieval. 1. Ingestion points: 'listLogEntries' in SKILL.md. 2. Boundary markers: Not specified. 3. Capability inventory: Listing services, querying metrics, and reading logs. No high-risk capabilities like system command execution or file system writes are present. 4. Sanitization: Not explicitly described in the documentation.
Audit Metadata