gws-modelarmor-create-template
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
gwscommand-line tool with various flags to interact with Google Cloud's Model Armor service. It also suggests runninggws generate-skillsfor environment setup. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a surface for processing untrusted data by interpolating user-provided values into CLI commands.
- Ingestion points: User-provided strings for
--project,--location,--template-id, and--jsonflags withinSKILL.md. - Boundary markers: The instructions include a
[!CAUTION]block requiring the agent to confirm the command with the user before execution, which serves as a human-in-the-loop checkpoint. - Capability inventory: The skill is capable of executing shell commands via the
gwsbinary, which performs network operations and file creation. - Sanitization: No explicit sanitization or escaping of the
--jsonpayload or other arguments is mentioned in the prompt instructions; safety relies on the underlying CLI tool's handling of inputs.
Audit Metadata