google-cloud-storage-fuse
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- Attribution and Telemetry: The skill includes instructions to tag service requests using specific environment variables and request headers for usage attribution. This allows for identifying the tool context without including sensitive user data.
- Evidence:
CLOUDSDK_METRICS_ENVIRONMENT="gcs-skills gcs-skills/1.0 (skill:google-cloud-storage-fuse)" - Evidence:
User-Agent: gcs-skills/1.0 (skill:google-cloud-storage-fuse) - Identity and Access Management: The guidance emphasizes the use of modern, keyless authentication mechanisms like Workload Identity and direct IAM bindings. These methods represent industry best practices for secure resource access.
- Evidence:
principal://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/PROJECT_ID.svc.id.goog/subject/ns/NAMESPACE/sa/KSA_NAME - Resource Configuration and Tuning: The skill provides detailed instructions for configuring filesystem mount parameters, including caching behaviors and performance optimization flags.
- Evidence:
gcsfuse --profile=aiml-training - External Resource Links: All external references and documentation links point to official vendor platforms and repositories, providing a transparent basis for the recommended configurations.
- Evidence:
https://github.com/GoogleCloudPlatform/gcsfuse/blob/master/docs/semantics.md
Audit Metadata