gcloud
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- Mandatory Command Validation: The skill enforces a strict policy of running
gcloud help <command>before any execution or planning. This pattern reduces the risk of hallucinations and ensures the agent uses accurate, leaf-level syntax. - Destructive Action Guardrails: It includes a comprehensive denylist of prohibited operations, such as IAM modifications, billing changes, and resource deletions, which require explicit human authorization before execution.
- Data Exposure Prevention: The instructions mandate data reduction flags (
--limit,--filter,--format) for alllistoperations. This is a best practice to prevent sensitive data overflow into the context window and manage resource usage efficiently. - Secure Authentication Guidance: The skill recommends service account impersonation for local development, which supports the principle of least privilege and avoids the need for hardcoding or storing sensitive JSON key files on workstations.
- Trusted External References: The skill links to official Google Cloud documentation (
docs.cloud.google.com) for installation and authentication guidance. These are established, trusted resources for thegcloudCLI environment.
Audit Metadata