skills/google/skills/cloud-sql-basics/Gen Agent Trust Hub

cloud-sql-basics

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • Administrative Capability Documentation: The skill references high-privilege operations such as instance creation, deletion, and full SQL execution (execute_sql). These capabilities are documented as part of standard administrative workflows and rely on the implementation of appropriate IAM roles, such as roles/cloudsql.admin, for secure operation.\n- Connectivity and Encryption Considerations: Instructions in SKILL.md and references/iam-security.md emphasize the use of the Cloud SQL Auth Proxy for secure, IAM-based connectivity. While some examples use sslmode=disable when connecting via the local proxy, this is a standard configuration where the proxy handles the encrypted tunnel, though users should evaluate their specific security requirements.\n- Credential Handling Examples: The skill includes code snippets with placeholders for credentials, such as PASSWORD or my-password, and one Terraform example uses password = "changeme". These are intended as illustrative examples and align with development best practices for local testing; actual production secrets should be managed through secure environment variables or secret management services.\n- Integration with Managed Tools: The documentation links to official Google Cloud libraries and well-known MCP (Model Context Protocol) resources. These integrations facilitate automated management of database resources within the Google Cloud ecosystem using verified and widely-used tools.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 06:23 PM