retail-product-search
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill executes CLI commands for resource management and environment setup. * Evidence: The 'scripts/cleanup.py' script uses 'subprocess.run' to invoke 'gcloud' commands for deleting Cloud Run services.
- External Dependency Installation: The skill installs required Python libraries from official registries during initialization. * Evidence: The 'scripts/bootstrap.sh' script uses 'pip' to install the skill and its dependencies, including official Google Cloud SDKs.
- Dynamic Resource Access: The setup and testing scripts utilize dynamic path resolution for module loading. * Evidence: 'scripts/setup.py' modifies 'sys.path' to import local scripts during the automated configuration process.
- Data Processing Surface: The skill ingests external product catalog files from local sources or Google Cloud Storage. * Evidence: 'scripts/ingest_bigquery.py' handles data ingestion, while 'scripts/validate_schema.py' performs schema and data type validation as a security sanitization step.
Audit Metadata