gke-cost-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill instructions include the use of
gcloud,bq, andkubectlto inspect resources and billing data. This is used to retrieve sensitive cost information directly related to the user's analytical requests. - [Configuration Management]: The skill provides a command to update cluster settings, which is necessary for detailed cost tracking. Specifically, the
gcloud container clusters updatecommand with the--enable-cost-allocationflag is included to ensure namespace-level granularity in reports. - [Input Interpolation]: Parameters provided by the user are incorporated into shell commands and SQL queries. Templates for
bq queryinSKILL.mduse placeholders like{project_id}and{billing_export_table}without explicit sanitization or boundary markers, which are populated at runtime. This surface is used for standard CLI tool interaction.
Audit Metadata