agent-platform-alert-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- GCP Metadata Processing Surface: The skill performs automated discovery of agent runtimes, telemetry settings, and linked datasets by querying the Google Cloud project environment. Ingesting this external metadata into the agent's context is an indirect prompt injection surface where manipulated resource labels or configurations could theoretically influence the agent's reasoning.
- Ingestion points:
scripts/gather_agent_info.py(via Cloud Asset Inventory and AI Platform APIs). - Boundary markers: Absent in scripts processing API outputs.
- Capability inventory: The agent can execute
gcloud,bq,terraform, andpython(specified inallowed-tools), perform network requests to Google Cloud APIs, and write configuration files. - Sanitization: Relies on the structured format of Google Cloud service responses.
- System Utility Execution: The skill uses Python's
subprocessmodule to invoke system utilities likegcloud,bq, andterraformfor environment auditing and configuration deployment. - Evidence:
scripts/gather_agent_info.pyexecutesgcloud asset search-all-resourcesandgcloud beta monitoring metrics-scopes listto identify project parameters. - Context: The skill implements a mandatory 'Safety & Confirmation' protocol in
SKILL.md, requiring explicit user approval for any 'Tier B' actions involving resource creation or billing.
Audit Metadata