bigquery-ai-ml
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [Data Processing Considerations]: The skill documents functions like
AI.AGG,AI.CLASSIFY, andAI.GENERATEwhich process unstructured data from sources such as Wikipedia comments, user reviews, and emails. When processing untrusted external data, users should consider implementing boundary markers or prompt delimiters as a best practice to manage potential injection risks. - Ingestion points: Data enters through arguments in functions like
AI.AGG(input, ...)inreferences/ai_agg.md,AI.CLASSIFY(input, ...)inreferences/ai_classify.md, and prompt interpolation inreferences/ai_generate.md. - Boundary markers: Examples typically use direct concatenation (e.g.,
'Summarize: ' || content); adding explicit delimiters is a recommended security enhancement for production use. - Capability inventory: The functions operate within the BigQuery SQL environment, which has permissions to read from and write to datasets and access Google Cloud Storage objects via
OBJ.GET_ACCESS_URL. - Sanitization: The documentation focuses on functional usage; users should apply standard data validation and sanitization when handling external inputs.
- [Cloud Storage Integration]: The skill provides examples of accessing multimodal data (images and PDFs) stored in Google Cloud Storage using
OBJ.GET_ACCESS_URL. The references target official Google sample data repositories and represent standard intended functionality. - Evidence: References to
gs://cloud-samples-data/bigquery/tutorials/...are found inreferences/ai_generate.mdandreferences/ai_similarity.md.
Audit Metadata