The Agent Skills Directory

Secure Resource Management: The skill explicitly instructs the agent to obtain user confirmation before executing any non-emulator database changes or destructive operations (e.g., dropping tables). This is a strong safety guardrail that prevents accidental data loss or unauthorized modifications.
Trusted Dependencies: The skill references official Google Cloud client libraries (e.g., google-cloud-spanner, @google-cloud/spanner) and provides installation instructions for standard environments. These are recognized vendor resources and do not pose a supply chain risk in this context.
IAM and Security Guidance: A dedicated reference file (iam-security.md) outlines essential security practices, including the Principle of Least Privilege, use of service accounts, and Customer-Managed Encryption Keys (CMEK), which helps users maintain a secure posture.
Official Documentation Links: All external links point to official Google Cloud documentation (docs.cloud.google.com) or the HashiCorp Terraform Registry, ensuring that information is sourced from reputable and verified providers.
Data Handling Considerations: While the skill processes database schemas and query results (potential indirect injection surface), it operates within the scope of a database administration tool and implements confirmation prompts for impactful actions, effectively managing this operational risk.

spanner-basics