gcp-alloydb

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill exclusively utilizes official gcloud CLI commands to interact with Google Cloud services, ensuring operations are performed within the user's authenticated cloud environment.\n- [SAFE]: Analysis of the scripts confirms no presence of hardcoded credentials, sensitive file paths (like SSH keys), or suspicious network connections to non-Google domains.\n- [SAFE]: The skill avoids the use of obfuscation, dynamic code execution, or privilege escalation techniques.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface common to CLI-based management tools by ingesting cloud resource names and passing them to subsequent commands.\n
  • Ingestion points: Resource names fetched via gcloud alloydb clusters list and gcloud alloydb instances list in SKILL.md.\n
  • Boundary markers: None explicitly defined within the interpolation logic.\n
  • Capability inventory: Executes shell commands including gcloud alloydb and gcloud monitoring for resource inspection and performance analysis in SKILL.md.\n
  • Sanitization: Uses jq to reliably extract names from structured JSON and basename to clean identifiers before use.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 02:32 AM