google-cloud-storage-basics

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Official Resource Acquisition: The skill includes instructions for downloading and installing official utilities like gcsfuse and the MCP Toolbox from vendor-controlled domains. These are standard components for the skill's intended functionality and are sourced from established cloud infrastructure paths (e.g., storage.googleapis.com).- Standard System Operations: The documentation provides examples using gcloud, curl, and package managers (pip, npm, go, apt-get) to manage storage resources. These are expected administrative commands for cloud storage management. The skill explicitly instructs the agent to obtain user consent before executing destructive actions such as deleting buckets or objects.- Elevated Permissions for Setup: Installation steps for system-level tools like gcsfuse involve sudo. This is a standard requirement for configuring system repositories and installing software on Linux environments and is presented as part of the manual setup process.- External Data Ingestion Surface: The skill allows the agent to read and process data from Cloud Storage buckets (via read_object and gcsfuse mounts). While this represents a surface where untrusted data could be encountered, the skill proactively references Model Armor integration to screen for prompt injections and malicious content, following security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 07:28 PM
Security Audit — agent-trust-hub — google-cloud-storage-basics