gcp-idle-resources
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill implements various functions that execute standard Google Cloud SDK (
gcloud) commands to list resources and query Cloud Monitoring metrics. These commands are used solely for identifying idle components like unattached disks, unused IP addresses, and low-utilization Cloud SQL instances. - [SAFE]: The skill instructions contain mandatory 'Anti-Hallucination' rules that serve as security and operational guardrails. These rules prevent the agent from making destructive recommendations by requiring it to treat resources as 'candidates for review' and to respect protection labels such as 'do-not-delete'.
- [DATA_EXPOSURE]: While the skill accesses cloud resource metadata and performance metrics, it does so within the expected scope of a cloud management tool. No sensitive credentials, private keys, or internal data are accessed or exposed by the provided scripts.
Audit Metadata