google-cloud-solution-n-tier-serverless-web-app

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Generation: The skill generates gcloud and terraform commands to assist users in deploying Google Cloud infrastructure. These commands are based on provided templates (assets/main.tf) and follow standard vendor practices for resource management.
  • Dynamic Script Generation: During the validation phase, the skill generates a custom Python validation script using standard libraries (urllib, subprocess). This script is designed to be executed by the user to verify the reachability and security of their specific deployment.
  • Indirect Prompt Injection Surface: The skill processes user-provided requirements to generate architectural designs and Infrastructure as Code (IaC). While this creates an input surface, the workflow includes structured validation steps and relies on pre-defined security rules in references/non-negotiable-architectural-rules.md to maintain safety.
  • Trusted Resource Integration: All external references, including APIs (googleapis.com), container registries (pkg.dev), and documentation links, target official Google Cloud services or trusted repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 02:00 AM