dataproc-skills
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The scripts use
child_process.spawnto execute commands vianpx. This is the primary method for invoking the Dataproc management tools provided by the@toolbox-sdk/serverpackage. - [EXTERNAL_DOWNLOADS]: Each script downloads and executes the
@toolbox-sdk/server@1.1.0package from the NPM registry at runtime using thenpx --yescommand. This is standard behavior for tools leveraging the toolbox-sdk infrastructure. - [CREDENTIALS_UNSAFE]: The scripts contain logic to read environment variables from a
.envfile located three levels above the script directory (../../../.env). This is used to load necessary configuration and credentials for Google Cloud authentication when running in supported CLI environments.
Audit Metadata