bigquery-migration-validator
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Credential Management: The skill provides instructions for managing database passwords through environment variables and Google Secret Manager, supporting secure authentication practices by avoiding the storage of plaintext secrets in configuration files.\n- External Resource Downloads: The tool fetches JDBC drivers from established developer repositories and manages its own components via the Google Cloud CLI, which is necessary for establishing connections to various source database dialects. The skill explicitly mentions that downloaded drivers are verified against pinned SHA-256 hashes.\n- Command Execution: The skill requires the execution of shell commands and SQL queries to perform data comparisons and manage cloud resources. These operations are scoped to the intended migration validation task and are part of the standard usage of the BigQuery Migration Service.\n- Access Control and Permissions: The instructions detail the specific identity and access management (IAM) roles required for the tool to operate, ensuring the agent has appropriate permissions to write to staging areas and run BigQuery jobs.
Audit Metadata