cloud-sql-basics
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill provides a wide range of
gcloudCLI commands and bash snippets for provisioning and managing Cloud SQL instances, databases, and users. These are the primary tools for the skill's operation and are expected in a cloud infrastructure management context. - External Dependency Management: Instructions are included for installing official Google Cloud client libraries using standard package managers such as
pip,npm, andgo get. These resources are provided by the vendor for secure database connectivity and represent standard development practices. - Indirect Prompt Injection Surface: The skill references the use of the
search_documentstool to fetch additional product information from external developer documentation. While ingesting external data into the agent's context is a known surface for indirect prompt injection, this behavior is a fundamental part of the skill's knowledge-retrieval capabilities and is typically mitigated by platform-level guardrails. - Telemetry and Attribution: The skill requests that
gcloudcommands be prefixed with a metrics attribution variable. This is a standard feature of the Google Cloud SDK used to track the usage of specific tools and does not involve the transmission of sensitive user data.
Audit Metadata