developer-device-platform-basics

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • Authentication and Token Management: The skill utilizes the official gcloud CLI to manage authentication and retrieve temporary access tokens. This is the standard, secure method for interacting with Google Cloud services, ensuring that permissions are handled via Application Default Credentials (ADC) without requiring hardcoded secrets.- Billing and Resource Governance: The instructions include mandatory checkpoints requiring the agent to obtain explicit user consent before executing commands that incur costs or create cloud resources. This provides a critical layer of human-in-the-loop oversight for resource management.- Network Communications: All API interactions are directed to well-known Google API endpoints (devicerun.googleapis.com and devicestreaming.googleapis.com). These communications are necessary for the skill's core functionality and use trusted, vendor-owned infrastructure.- External Dependencies: The skill identifies dependencies on official Python libraries and references the widely-used scrcpy utility. The guidance correctly advises the agent to prompt users before installing any third-party software, maintaining user control over the local environment.- Command Execution: The skill facilitates device connectivity by executing local commands such as adb and running a provided Python script. These operations are scoped to established development workflows and are managed through background process monitoring to ensure proper cleanup of resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 12:30 AM
Security Audit — agent-trust-hub — developer-device-platform-basics