google-cloud-solution-hybrid-search-alloydb
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Generation for Infrastructure and Validation]: The skill generates deployment guidance involving CLI commands (gcloud, terraform) and SQL scripts. These are designed to be reviewed and executed by the user to provision and verify the solution architecture, aligning with the skill's purpose as a technical guide.
- [Integration with External Developer Resources]: The workflow incorporates data from official documentation and specialized tooling (MCP Toolbox) hosted within the author's official GitHub and API domains. These references are used to ground the generated content in official guidance and provide necessary connectivity for the search system.
- [Requirement-Driven Design Generation]: The skill ingests user-provided requirements to generate tailored architecture diagrams and descriptions. While this processing of external data constitutes a surface for indirect prompt injection, the skill mitigates this by enforcing strict phase separation, mandatory human approval gates at each step, and recommending the use of security guardrails like Model Armor for the final implementation.
Audit Metadata