compute-spot-capacity-advice
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- Cloud CLI Usage: The skill utilizes the
gcloudcommand-line tool to fetch capacity advice from Google Cloud. This is the intended functionality and follows official Google Cloud workflows. - Usage Attribution: The skill includes an environment variable (
CLOUDSDK_METRICS_REQUEST_ATTRIBUTION) and customUser-Agentheaders for telemetry. These are non-sensitive identifiers used for service attribution. - Principle of Least Privilege: Guidance is provided for using specific IAM permissions, recommending
roles/compute.viewerrather than broader administrative roles to maintain a secure environment. - Safety Guardrails: The instructions explicitly forbid the agent from performing automated installations or resource modifications (such as creating VMs) without direct user approval, which prevents unintended cloud spend or configuration changes.
- Trusted External References: Documentation links point to official Google Cloud domains (
cloud.google.com,docs.cloud.google.com), which are verified and trusted sources for technical configuration.
Audit Metadata