managed-airflow-dag-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- Resource Access and Retrieval: The skill facilitates the retrieval of diagnostic information, such as logs and source code, from Google Cloud Storage using
gcloud storagecommands. This is intended to allow the agent to correlate error messages with the specific logic deployed in the environment. - Platform Interaction: It utilizes standard Google Cloud CLI tools (
gcloud composerandgcloud logging) to query environment status and task metadata. These commands enable the agent to identify failing tasks and platform-level issues within the managed service. - Data Ingestion Considerations: The skill is designed to process external data, including task logs and source code, to perform root cause analysis.
- Ingestion points: Data enters the agent context through the outputs of
gcloud logging readandgcloud storage cp/catas defined inSKILL.md. - Boundary markers: While the skill does not use explicit delimiters, it instructs the agent to ground all advice in direct findings and verbatim evidence.
- Capability inventory: The agent has the capability to execute environment-specific commands via
gcloud composer environments runand manage local files viagcloud storage cp. - Sanitization: The instructions include a safety directive to redact sensitive information, such as passwords, if they are detected within the log payloads.
- Dynamic Resource Identification: The skill provides logic for locating configuration files by analyzing DAG source code. It guides the agent to extract parameters from function calls (e.g.,
generate_dags) to dynamically construct paths to relevant YAML definitions in the environment's storage bucket.
Audit Metadata