skills/google/skills/cloud-sql-basics/Gen Agent Trust Hub

cloud-sql-basics

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill provides a wide range of gcloud CLI commands and bash snippets for provisioning and managing Cloud SQL instances, databases, and users. These are the primary tools for the skill's operation and are expected in a cloud infrastructure management context.
  • External Dependency Management: Instructions are included for installing official Google Cloud client libraries using standard package managers such as pip, npm, and go get. These resources are provided by the vendor for secure database connectivity and represent standard development practices.
  • Indirect Prompt Injection Surface: The skill references the use of the search_documents tool to fetch additional product information from external developer documentation. While ingesting external data into the agent's context is a known surface for indirect prompt injection, this behavior is a fundamental part of the skill's knowledge-retrieval capabilities and is typically mitigated by platform-level guardrails.
  • Telemetry and Attribution: The skill requests that gcloud commands be prefixed with a metrics attribution variable. This is a standard feature of the Google Cloud SDK used to track the usage of specific tools and does not involve the transmission of sensitive user data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 08:17 AM