gke-cost-analysis

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Command Execution]: The skill instructions include the use of gcloud, bq, and kubectl to inspect resources and billing data. This is used to retrieve sensitive cost information directly related to the user's analytical requests.
  • [Configuration Management]: The skill provides a command to update cluster settings, which is necessary for detailed cost tracking. Specifically, the gcloud container clusters update command with the --enable-cost-allocation flag is included to ensure namespace-level granularity in reports.
  • [Input Interpolation]: Parameters provided by the user are incorporated into shell commands and SQL queries. Templates for bq query in SKILL.md use placeholders like {project_id} and {billing_export_table} without explicit sanitization or boundary markers, which are populated at runtime. This surface is used for standard CLI tool interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 05:55 PM
Security Audit — agent-trust-hub — gke-cost-analysis