gcloud
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Mandatory Syntax Validation: The skill implements a robust pre-condition requiring the agent to validate leaf-level syntax using
gcloud help <command>before proposing or executing any action. This is a positive security feature designed to prevent hallucinations and ensure correct flag application. - Destructive Action Guardrails: A comprehensive denylist of 'Prohibited Operations' is provided, including IAM policy modifications, resource deletion, and billing changes. These operations explicitly require human authorization, preventing autonomous destructive actions or unauthorized privilege escalation.
- Data Reduction and Scoping: The skill mandates the use of flags like
--limit,--filter, and--formatto prevent context window exhaustion. It also requires explicit project and location scoping (--project,--zone) to ensure commands are deterministic and target the intended environments. - Official Remote Execution Infrastructure: The skill facilitates command execution via an official Google Model Context Protocol (MCP) server (
https://cloudcli.googleapis.com/mcp). This is the primary functional mechanism of the skill and targets a trusted vendor endpoint for managed execution. - CLI Input Processing: As an agentic skill that interacts with CLI outputs, there is an inherent consideration regarding how the agent interprets command results. The skill mitigates this by instructing the agent to use structured JSON formats and schema discovery (
--format=json), which improves the reliability of data parsing.
Audit Metadata