google-cloud-global-frontend-configuration
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution for Cloud Management]: The skill uses Google Cloud CLI (
gcloud) commands to perform resource discovery and infrastructure deployment. These operations are standard for cloud administration and are used here to automate the detection of existing project resources like Cloud Storage buckets and Compute Engine groups. - [Infrastructure Code Generation]: The skill generates Terraform HCL and bash scripts based on user requirements. This dynamic generation follows strict, opinionated best-practice templates provided within the skill's reference documents, which helps ensure configuration consistency and reduces manual errors.
- [Trusted External References]: The instructions reference official Google Cloud documentation and verified Terraform modules from the Terraform Registry. These are established resources provided by the vendor to facilitate secure and reliable infrastructure management.
- [Permission and IAM Validation]: A dedicated workflow for IAM pre-checks is included, guiding the user to verify necessary permissions (such as
compute.adminorconfig.admin) before initiating any deployment. This practice promotes the principle of least privilege and prevents unauthorized infrastructure changes. - [Input Handling in Resource Discovery]: The skill processes resource names and locations retrieved from the user's active Google Cloud project to facilitate configuration. This is a standard discovery pattern used to present users with relevant options during the design phase.
Audit Metadata