cloud-sql-basics
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- Administrative Capability Documentation: The skill references high-privilege operations such as instance creation, deletion, and full SQL execution (
execute_sql). These capabilities are documented as part of standard administrative workflows and rely on the implementation of appropriate IAM roles, such asroles/cloudsql.admin, for secure operation.\n- Connectivity and Encryption Considerations: Instructions inSKILL.mdandreferences/iam-security.mdemphasize the use of the Cloud SQL Auth Proxy for secure, IAM-based connectivity. While some examples usesslmode=disablewhen connecting via the local proxy, this is a standard configuration where the proxy handles the encrypted tunnel, though users should evaluate their specific security requirements.\n- Credential Handling Examples: The skill includes code snippets with placeholders for credentials, such asPASSWORDormy-password, and one Terraform example usespassword = "changeme". These are intended as illustrative examples and align with development best practices for local testing; actual production secrets should be managed through secure environment variables or secret management services.\n- Integration with Managed Tools: The documentation links to official Google Cloud libraries and well-known MCP (Model Context Protocol) resources. These integrations facilitate automated management of database resources within the Google Cloud ecosystem using verified and widely-used tools.
Audit Metadata