google-cloud-global-frontend-configuration

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes various gcloud CLI commands to perform resource discovery, manage deployments, and analyze configuration drift. These operations are the primary function of the skill for interacting with a user's Google Cloud environment.
  • External Resource References: The documentation points to official Google Cloud services and Google-maintained Terraform modules on the Terraform Registry. These are recognized, well-known sources used for infrastructure-as-code development.
  • Indirect Prompt Injection Surface: The skill ingests external data from the output of gcloud resource listing commands to populate selection lists. While this represents a data ingestion point, the source is the user's own authenticated cloud project.
  • Service Attribution and Telemetry: The instructions include requirements to tag commands and API requests with a specific metrics environment variable and a custom User-Agent. This is a standard mechanism for usage attribution in developer tools and is used as documented without collecting user-sensitive information.
  • Managed Actuation and Deployment: The skill provides guidance for executing generated bash scripts or Terraform configurations via Infrastructure Manager. This process includes appropriate safety measures such as IAM permission verification before deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 10:00 PM