gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural patterns and deployment scripts for GCP Cloud Run and Cloud Run Functions that align with official documentation and industry standards.- [SAFE]: Dockerfile templates implement security best practices, such as utilizing multi-stage builds, non-root user execution ('USER node'), and distroless base images to minimize the attack surface.- [SAFE]: Deployment commands and Cloud Build configurations use official Google-maintained container images (e.g., 'gcr.io/google.com/cloudsdktool/cloud-sdk') for environment setup and deployment.- [SAFE]: No hardcoded credentials, sensitive data access, or obfuscated code patterns were found within the provided instructions or code blocks.- [SAFE]: Input handling in the provided Node.js examples is used for standard routing and logging purposes, presenting no immediate risk of injection or exfiltration.
Audit Metadata