cloud-build-basics
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill provides numerous
gcloudCLI commands for authenticating, enabling services, and managing build triggers. These are standard operations for the Google Cloud SDK and are consistent with the skill's stated purpose of teaching Cloud Build fundamentals. - External Downloads: The skill includes instructions to clone a sample repository from
https://github.com/GoogleCloudBuild/cloud-console-sample-build. This is an official resource from a trusted organization and does not present a security risk in this context. - Indirect Prompt Injection: The instructions use placeholders like
<PROJECT_ID>,<TRIGGER_NAME>, and<BRANCH_NAME>within shell commands. While this introduces a surface where user-provided input is interpolated into commands, it is the intended functionality for a developer-oriented skill. Users should ensure they provide valid, trusted values when populating these parameters.
Audit Metadata