bigquery-optimization

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes gcloud and bq CLI tools to configure projects and fetch metadata from BigQuery system views. These operations are core to the skill's diagnostic and optimization capabilities.
  • External Downloads: The workflow involves using npx to install companion skills from the developer's repository. This is an expected mechanism for extending the suite's functionality within the intended environment.
  • Usage Attribution: The instructions include setting environment variables and modifying headers to attribute requests to this specific skill. This telemetry is documented as being used for identification purposes and does not involve the transfer of sensitive user data.
  • Data Retrieval Surface: The skill ingests table schemas and INFORMATION_SCHEMA data to provide tailored optimization advice. This interaction with external data sources represents an ingestion point where data influences the agent's generated recommendations.
  • Operational Guardrails: The skill maintains a protective posture regarding financial mutations, instructing the agent to never autonomously execute purchases or change billing models. It instead providing deep links for manual user action in the Cloud Console.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 09:31 PM