google-cloud-storage-basics
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- External Resource Downloads: The skill provides instructions to download the MCP Toolbox binary from a vendor-owned domain (
storage.googleapis.com) and install specialized storage plugins usingnpx. These are standard methods for obtaining the required tooling to interact with Google Cloud services. - Command Execution & Integration: The skill makes extensive use of the
gcloud storageCLI and MCP tools to perform bucket and object operations. It correctly implements attribution by prefixing commands with metrics environment variables and setting user-agent headers, which is a standard practice for usage tracking. - Persistence Mechanisms: Instructions for mounting buckets via Cloud Storage FUSE include adding entries to
/etc/fstab. While this modifies system configuration to ensure storage is available across reboots, it is a legitimate and expected configuration for file system mount tools. - Credential Management & Security Cautions: The skill emphasizes the use of Application Default Credentials (ADC) and provides templates for service account credential files. It includes multiple 'Caution' and 'Warning' blocks requiring explicit user approval before the agent performs deletions or overwrites, mitigating the risk of accidental data loss.
Audit Metadata