google-cloud-solution-n-tier-serverless-web-app
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Generation: The skill generates
gcloudandterraformcommands to assist users in deploying Google Cloud infrastructure. These commands are based on provided templates (assets/main.tf) and follow standard vendor practices for resource management. - Dynamic Script Generation: During the validation phase, the skill generates a custom Python validation script using standard libraries (
urllib,subprocess). This script is designed to be executed by the user to verify the reachability and security of their specific deployment. - Indirect Prompt Injection Surface: The skill processes user-provided requirements to generate architectural designs and Infrastructure as Code (IaC). While this creates an input surface, the workflow includes structured validation steps and relies on pre-defined security rules in
references/non-negotiable-architectural-rules.mdto maintain safety. - Trusted Resource Integration: All external references, including APIs (
googleapis.com), container registries (pkg.dev), and documentation links, target official Google Cloud services or trusted repositories.
Audit Metadata