skills/google/skills/gcloud/Gen Agent Trust Hub

gcloud

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • Mandatory Command Validation: The skill enforces a strict policy of running gcloud help <command> before any execution or planning. This pattern reduces the risk of hallucinations and ensures the agent uses accurate, leaf-level syntax.
  • Destructive Action Guardrails: It includes a comprehensive denylist of prohibited operations, such as IAM modifications, billing changes, and resource deletions, which require explicit human authorization before execution.
  • Data Exposure Prevention: The instructions mandate data reduction flags (--limit, --filter, --format) for all list operations. This is a best practice to prevent sensitive data overflow into the context window and manage resource usage efficiently.
  • Secure Authentication Guidance: The skill recommends service account impersonation for local development, which supports the principle of least privilege and avoids the need for hardcoding or storing sensitive JSON key files on workstations.
  • Trusted External References: The skill links to official Google Cloud documentation (docs.cloud.google.com) for installation and authentication guidance. These are established, trusted resources for the gcloud CLI environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 03:33 PM
Security Audit — agent-trust-hub — gcloud