gcp-alloydb
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill exclusively utilizes official gcloud CLI commands to interact with Google Cloud services, ensuring operations are performed within the user's authenticated cloud environment.\n- [SAFE]: Analysis of the scripts confirms no presence of hardcoded credentials, sensitive file paths (like SSH keys), or suspicious network connections to non-Google domains.\n- [SAFE]: The skill avoids the use of obfuscation, dynamic code execution, or privilege escalation techniques.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface common to CLI-based management tools by ingesting cloud resource names and passing them to subsequent commands.\n
- Ingestion points: Resource names fetched via
gcloud alloydb clusters listandgcloud alloydb instances listin SKILL.md.\n - Boundary markers: None explicitly defined within the interpolation logic.\n
- Capability inventory: Executes shell commands including
gcloud alloydbandgcloud monitoringfor resource inspection and performance analysis in SKILL.md.\n - Sanitization: Uses
jqto reliably extract names from structured JSON andbasenameto clean identifiers before use.
Audit Metadata