dataproc-skills

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts use npx to dynamically download and execute the @toolbox-sdk/server package from the npm registry. This is a versioned dependency (@1.1.0) used to facilitate the Dataproc operations.
  • [COMMAND_EXECUTION]: The skill executes system commands using child_process.spawn to invoke the toolbox CLI. This is the primary mechanism for the skill's functionality, involving the execution of npx or npx.cmd depending on the host operating system.
  • [CREDENTIALS_UNSAFE]: The scripts include logic to read and parse .env files located in the project root to load necessary environment variables. This is documented as a standard practice for managing cluster configuration and authentication for this skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 05:18 AM