managed-airflow-dag-authoring

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Command Execution]: The skill utilizes official command-line tools such as gcloud and composer-dev to interact with Google Cloud Composer environments. These tools are used for routine tasks such as retrieving environment metadata, validating DAG syntax, and deploying files to Google Cloud Storage. These actions are within the expected scope for a cloud management skill.
  • [Indirect Prompt Injection Surface]: The skill processes user-defined inputs like environment names and file paths to construct shell commands. While this is a common pattern for CLI-based automation, it is a point where user-provided data influences execution.
  • Ingestion points: Variable placeholders such as {env_name}, {region}, {target_bucket}, and {dag_id} in SKILL.md are used within command templates.
  • Boundary markers: The skill provides clear context for these variables, though specific delimiters for the values are not defined in the instructions.
  • Capability inventory: The skill possesses the ability to execute shell commands (gcloud, ruff, cp) and perform network operations through the gcloud utility.
  • Sanitization: The skill relies on the agent's execution environment to provide appropriate validation and escaping for parameters passed to shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 10:29 AM
Security Audit — agent-trust-hub — managed-airflow-dag-authoring