google-cloud-global-frontend-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes various
gcloudCLI commands to perform resource discovery, manage deployments, and analyze configuration drift. These operations are the primary function of the skill for interacting with a user's Google Cloud environment. - External Resource References: The documentation points to official Google Cloud services and Google-maintained Terraform modules on the Terraform Registry. These are recognized, well-known sources used for infrastructure-as-code development.
- Indirect Prompt Injection Surface: The skill ingests external data from the output of
gcloudresource listing commands to populate selection lists. While this represents a data ingestion point, the source is the user's own authenticated cloud project. - Service Attribution and Telemetry: The instructions include requirements to tag commands and API requests with a specific metrics environment variable and a custom User-Agent. This is a standard mechanism for usage attribution in developer tools and is used as documented without collecting user-sensitive information.
- Managed Actuation and Deployment: The skill provides guidance for executing generated bash scripts or Terraform configurations via Infrastructure Manager. This process includes appropriate safety measures such as IAM permission verification before deployment.
Audit Metadata