google-cloud-slo-alert-configuration
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Automated Resource Discovery: The skill employs
gcloudCLI commands (such asrun services listandasset search-all-resources) to autonomously identify active services and workloads. This is used to streamline the monitoring setup and is a standard administrative practice for infrastructure-aware agents. - Official Documentation Access: It retrieves configuration details and metric mappings from official Google Cloud documentation domains (e.g.,
docs.cloud.google.com). Accessing these trusted sources ensures that the generated PromQL queries are accurate and follow current provider specifications. - Infrastructure-as-Code Generation: The primary output of the skill is Terraform (
.tf) files generated via thewrite_to_filetool. This allows users to review and version-control their monitoring infrastructure before deployment. - Data Processing Surface: The skill ingests metadata from the environment and user-provided targets to populate templates. This is a common pattern for configuration wizards.
- Ingestion points: Resource names and labels retrieved from
gcloudoutput, as well as user-specified SLO targets and metric names. - Boundary markers: The skill uses predefined PromQL and Terraform templates as structural boundaries for data interpolation.
- Capability inventory: The skill uses
gcloudfor environment inspection,read_url_contentfor retrieving metric guidelines, andwrite_to_filefor configuration output. - Sanitization: The skill relies on structured templates to ensure that environment data is correctly formatted into the resulting observability code.
Audit Metadata