gemini-batch
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions in
SKILL.mdandreferences/gcs-setup.mdto download and execute the Google Cloud SDK installer directly fromhttps://sdk.cloud.google.comvia bash. This fetches official tooling from a well-known service for environment setup. - [EXTERNAL_DOWNLOADS]: The skill references the Google Cloud SDK from official Google domains to enable
gcloudandgsutilCLI functionality required for GCS operations. - [COMMAND_EXECUTION]: The skill instructions utilize
gcloudandgsutilCLI tools for authentication, bucket management, and file operations within Google Cloud Platform. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing large volumes of external documents (PDFs, images) through the Gemini Batch API.
- Ingestion points: Files are processed from local directories and GCS buckets as seen in
examples/batch_processor.pyandexamples/icon_batch_vision.py. - Boundary markers: Data is isolated within the
contentsfield of JSONL requests. - Capability inventory: The skill performs local file writes, GCS uploads, and authenticated network calls to Google Generative AI and Cloud Storage APIs.
- Sanitization: Robust JSON extraction using regex is implemented in
examples/batch_processor.py, and input validation is provided inscripts/validate_jsonl.py.
Audit Metadata