cloud-run-basics
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill uses the Google Cloud CLI (
gcloud) to manage Cloud Run services, jobs, and worker pools. This includes enabling APIs, configuring IAM roles, and performing deployments. These operations are the primary purpose of the skill and utilize standard administrative tools. - External Downloads: The skill references and provides installation instructions for official Google Cloud client libraries from established registries, including PyPI (
google-cloud-run), NPM (@google-cloud/run), and the Go module registry. These are trusted resources provided by the vendor. - Indirect Prompt Injection Surface: The skill facilitates the deployment of applications directly from source code (
gcloud run deploy --source .). This creates an interaction surface where the agent processes local files. - Ingestion points: Local application source code and Dockerfiles (SKILL.md, references/cli-usage.md).
- Boundary markers: Not explicitly defined within the instructions for the content of the source code being deployed.
- Capability inventory: Deployment of containerized workloads to Google Cloud Platform, including the creation of public HTTP endpoints and the execution of background tasks.
- Sanitization: The skill relies on the underlying platform's (Cloud Build and Cloud Run) validation and security mechanisms for the deployment process.
Audit Metadata