api-gateway-mcp-server
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the Google Cloud CLI (
gcloud) to manage API Gateway resources, enable services, and handle IAM permissions. These commands are essential for the deployment and management of the infrastructure and follow established cloud administration patterns. - External Downloads: The skill requires the installation of the Google Cloud CLI and Python packages such as
PyYAMLandgoogle-adk. These are standard, reputable tools and libraries provided by trusted sources, and their use is necessary for the skill's validation and integration tasks. - Indirect Prompt Injection Surface: The provided validation script (
scripts/validate_mcp_openapi.py) processes user-supplied OpenAPI specifications. This creates an ingestion point for external data; however, the script uses safe parsing methods likeyaml.safe_load()and does not execute the content of the specifications, adhering to security best practices for handling untrusted input files.
Audit Metadata