secops-setup-gemini
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- Remote Code Execution Pattern: The skill includes an instruction to install the
uvutility using a shell script fetched fromastral.sh. While piping a remote script to a shell is a notable pattern, this is the official and standard installation method provided by the tool's vendor. - Administrative Command Execution: The configuration process involves running
gcloudCLI commands to handle authentication and setting a quota project. These are standard operations for users managing Google Cloud resources. - Local Configuration Modification: The skill guides the user to update their local
~/.gemini/config.jsonwith settings for a remote MCP server. This is a routine task for integrating security services into the Gemini CLI environment.
Audit Metadata