agent-platform-architecture
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- Standard Infrastructure Management: The skill utilizes standard Google Cloud SDK (
gcloud) commands and REST APIs for configuring platform components such as Agent Gateways, Connectivity Templates, and IAM policies. These are routine administrative operations within the Google Cloud ecosystem. - Security Best Practices: The instructions emphasize least-privilege IAM roles, fail-closed security guardrails (Model Armor), and zero-trust identity boundaries (SPIFFE/AGENT_IDENTITY). It explicitly cautions users to seek human approval before performing sensitive operations like modifying organization policies or granting permissive IAM bindings.
- Network Governance: It provides detailed patterns for egress auditing and data exfiltration prevention using Secure Web Proxy (SWP) and Policy-Based Routing (PBR). These configurations are designed to enhance the security posture of AI agent deployments.
- Data Handling & Privacy: The skill includes guidance on privacy-preserving telemetry (disabling message content in spans) and cost governance (BigQuery dry-run checks). It also describes secure token exchange mechanisms (STS) that avoid hardcoding credentials.
Audit Metadata