agent-platform-inference

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Confirmation Tiers for Inference: The skill implements a robust safety framework requiring interactive 'Yes/No' confirmation before executing model inference. This prevents unintended costs or quota consumption by ensuring the user is aware of the parameters being sent to the AI service.
  • Credential Management: The Python scripts correctly use google.auth.default() and dynamic access token refreshing (creds.refresh). This is a secure alternative to hardcoded API keys or long-lived secrets, aligning with standard Google Cloud security practices.
  • Virtual Environment Isolation: The setup instructions and verification script (verify_all.sh) prioritize the use of Python virtual environments and temporary directories. This ensures that dependencies are managed in an isolated manner, reducing the risk of system-wide library conflicts or persistence.
  • Shell Script Execution: The verify_all.sh script automates the testing of provided samples. While it executes shell commands and Python scripts, it uses safe patterns such as set -e for error handling and mktemp for secure temporary directory creation, followed by guaranteed cleanup via a trap handler.
  • Official Resource Integration: The skill references official Google Cloud documentation and Model Garden endpoints. All network interactions are directed toward authenticated Google APIs, which are trusted services for the intended purpose of this skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 07:58 AM
Security Audit — agent-trust-hub — agent-platform-inference