iam-helper-for-policy-simulator
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Standard Command Execution]: The skill uses
gcloudCLI commands to manage IAM policies and the Google Cloud IAM Policy Simulator. These are standard operations for Google Cloud administration. - [Local Script Execution]: The skill includes a Python script (
scripts/analyze_simulation.py) to parse JSON output from the simulation. The script performs localized data processing on temporary files without external network access or dynamic code execution. - [Credential Management]: The skill instructs the user to save and modify policy files in the
/tmp/directory and includes a cleanup step to remove these files after the workflow completes, which is a common practice for handling temporary data.
Audit Metadata