cloud-databases-onboarding
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Infrastructure Code Drafting: The skill provides a workflow to draft Terraform and gcloud CLI scripts in its 'Implementation & Provisioning' phase. It follows a structured approach that includes scanning the user's workspace for existing configurations, validating drafted syntax, and submitting changes via Pull Requests. The skill explicitly forbids the direct execution of mutating infrastructure commands (such as
terraform apply), ensuring that all changes remain subject to human review. - Local Validation Utility: A Python script (
scripts/database_onboarding_skill.py) is included to verify the formatting and integrity of the skill's reference files. This script performs standard local file reading and text parsing using regular expressions, with no evidence of network operations, dynamic code execution (likeeval), or external dependencies. - Indirect Prompt Injection Surface: During the provisioning phase, the skill ingests information from existing files in the user's workspace to provide context for new database resources.
- Ingestion points: Reads existing Terraform and configuration files from the user's workspace.
- Boundary markers: The skill includes explicit instructions to obtain user confirmation before modifying any files and to present final drafts in a Pull Request.
- Capability inventory: Drafting of configuration files and creation of Pull Requests; no direct shell execution of infrastructure changes is permitted.
- Sanitization: The skill relies on human-in-the-loop verification and the platform's standard Pull Request review process to sanitize and validate generated code.
Audit Metadata