application-design-center-design-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill utilizes official CLI tools, specifically
gcloudandterraform, to manage cloud infrastructure and deployment workflows. These operations are core to the skill's purpose. - Secure Subprocess Handling: Python scripts used within the skill invoke shell commands using list-based arguments. This pattern is a security best practice that prevents command injection vulnerabilities by avoiding the use of a shell for execution.
- External Content Acquisition: The skill downloads Terraform modules and templates from the official
GoogleCloudPlatformGitHub organization and Google Cloud Storage buckets. These are trusted sources provided by the vendor. - Security Policies: The instructions include explicit mandates for security, such as requiring the use of Google Cloud Secret Manager for sensitive data instead of plaintext HCL values, and maintaining local state isolation during the validation phase.
Audit Metadata