google-cloud-storage-basics

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
  • External Resource Downloads: The skill provides instructions to download the MCP Toolbox binary from a vendor-owned domain (storage.googleapis.com) and install specialized storage plugins using npx. These are standard methods for obtaining the required tooling to interact with Google Cloud services.
  • Command Execution & Integration: The skill makes extensive use of the gcloud storage CLI and MCP tools to perform bucket and object operations. It correctly implements attribution by prefixing commands with metrics environment variables and setting user-agent headers, which is a standard practice for usage tracking.
  • Persistence Mechanisms: Instructions for mounting buckets via Cloud Storage FUSE include adding entries to /etc/fstab. While this modifies system configuration to ensure storage is available across reboots, it is a legitimate and expected configuration for file system mount tools.
  • Credential Management & Security Cautions: The skill emphasizes the use of Application Default Credentials (ADC) and provides templates for service account credential files. It includes multiple 'Caution' and 'Warning' blocks requiring explicit user approval before the agent performs deletions or overwrites, mitigating the risk of accidental data loss.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:59 PM