google-cloud-storage-basics
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Official Resource Acquisition: The skill includes instructions for downloading and installing official utilities like
gcsfuseand the MCP Toolbox from vendor-controlled domains. These are standard components for the skill's intended functionality and are sourced from established cloud infrastructure paths (e.g.,storage.googleapis.com).- Standard System Operations: The documentation provides examples usinggcloud,curl, and package managers (pip,npm,go,apt-get) to manage storage resources. These are expected administrative commands for cloud storage management. The skill explicitly instructs the agent to obtain user consent before executing destructive actions such as deleting buckets or objects.- Elevated Permissions for Setup: Installation steps for system-level tools likegcsfuseinvolvesudo. This is a standard requirement for configuring system repositories and installing software on Linux environments and is presented as part of the manual setup process.- External Data Ingestion Surface: The skill allows the agent to read and process data from Cloud Storage buckets (viaread_objectandgcsfusemounts). While this represents a surface where untrusted data could be encountered, the skill proactively references Model Armor integration to screen for prompt injections and malicious content, following security best practices.
Audit Metadata