skills/edwinhu/workflows/gemini-batch/Gen Agent Trust Hub

gemini-batch

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions in SKILL.md and references/gcs-setup.md to download and execute the Google Cloud SDK installer directly from https://sdk.cloud.google.com via bash. This fetches official tooling from a well-known service for environment setup.
  • [EXTERNAL_DOWNLOADS]: The skill references the Google Cloud SDK from official Google domains to enable gcloud and gsutil CLI functionality required for GCS operations.
  • [COMMAND_EXECUTION]: The skill instructions utilize gcloud and gsutil CLI tools for authentication, bucket management, and file operations within Google Cloud Platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing large volumes of external documents (PDFs, images) through the Gemini Batch API.
  • Ingestion points: Files are processed from local directories and GCS buckets as seen in examples/batch_processor.py and examples/icon_batch_vision.py.
  • Boundary markers: Data is isolated within the contents field of JSONL requests.
  • Capability inventory: The skill performs local file writes, GCS uploads, and authenticated network calls to Google Generative AI and Cloud Storage APIs.
  • Sanitization: Robust JSON extraction using regex is implemented in examples/batch_processor.py, and input validation is provided in scripts/validate_jsonl.py.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 10:36 AM