django-cloud-sql-postgres

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions in references/cloud-sql-proxy-setup.md to download the Cloud SQL Auth Proxy binary from Google's official storage service (storage.googleapis.com). As this targets a well-known and trusted service for the purpose of secure database connectivity, it is considered safe.
  • [COMMAND_EXECUTION]: The skill includes instructions for executing shell commands related to infrastructure management and application deployment. These include gcloud commands for resource provisioning, pip for dependency management, and standard file operations like chmod and mv for installing CLI tools. These are standard operations for the intended use case.
  • [CREDENTIALS_SAFE]: The skill explicitly warns against hardcoding sensitive information like database passwords and Django secret keys. It provides specific patterns for using environment variables and integrates with Google Secret Manager, demonstrating a strong security posture regarding secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:54 AM
Security Audit — agent-trust-hub — django-cloud-sql-postgres