assuredworkloads-frameworks-navigator
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill uses
subprocess.runinscripts/db_resources_loader.pyto executegcloudCLI commands. This is a potential consideration but is necessary for its core function of fetching Google Cloud compliance frameworks and cloud controls. The commands are constructed using specific arguments and targeting official Google Cloud APIs. - Read-Only Policy: The skill includes mandatory guardrails to ensure that operations are read-only and do not mutate the live environment. Mutations are restricted to workspace preparation tasks such as setting the active project or enabling necessary APIs.
- Resource Origin: All scripts, references, and targeted APIs (
cloudsecuritycompliance.googleapis.com) are consistent with the official Google vendor infrastructure, representing normal vendor functionality for managing Assured Workloads.
Audit Metadata