dataproc-skills
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The scripts use
npxto dynamically download and execute the@toolbox-sdk/serverpackage from the npm registry. This is a versioned dependency (@1.1.0) used to facilitate the Dataproc operations. - [COMMAND_EXECUTION]: The skill executes system commands using
child_process.spawnto invoke the toolbox CLI. This is the primary mechanism for the skill's functionality, involving the execution ofnpxornpx.cmddepending on the host operating system. - [CREDENTIALS_UNSAFE]: The scripts include logic to read and parse
.envfiles located in the project root to load necessary environment variables. This is documented as a standard practice for managing cluster configuration and authentication for this skill.
Audit Metadata