agent-platform-inference
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- External Package Installation: The skill uses
pipto install official libraries such asgoogle-genai,google-cloud-aiplatform, andopenaifrom standard package registries. These dependencies are required for communicating with the specified cloud services.- Command Execution: The instructions utilize thegcloudCLI for authentication, API enablement, and resource discovery. Additionally, a shell script (scripts/verify_all.sh) is provided to execute the included Python sample scripts for verification purposes.- Indirect Prompt Injection Surface: The skill processes user-supplied data, including prompt text and project identifiers, to perform model inference. While the skill mandates a 'Tier R' confirmation protocol requiring explicit user approval before execution, the ingestion of untrusted content into model prompts is an inherent security consideration.- Dynamic Execution: The skill involves the automated execution of locally provided Python scripts through a verification shell script. This is used to ensure the environment is correctly configured before the agent performs inference tasks.
Audit Metadata