gcp-managed-spark-upgrades
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external source code and job metadata which could theoretically contain instructions intended to influence the agent's behavior.
- Ingestion points: The skill downloads and analyzes Spark source code from Google Cloud Storage (GCS) or local paths specified by the user in
SKILL.md. - Boundary markers: The instructions provide explicit constraints to maintain functional logic and production paths, acting as a behavioral boundary.
- Capability inventory: The skill possesses the ability to create Dataproc clusters, submit jobs via
gcloud dataproc, and perform file operations usinggcloud storageanduv run. - Sanitization: The skill performs syntax verification using
python3 -m py_compilebut does not implement explicit content filtering or sanitization on the ingested Spark scripts. - [COMMAND_EXECUTION]: The skill frequently uses shell commands to interact with the environment and cloud resources.
- Evidence: Extensive use of
gcloudCLI tools for project description, region validation, cluster management, and job submission acrossSKILL.mdandreferences/cluster_input_validations.md. - Evidence: Uses
uv runto execute the internal helper scriptscripts/cluster_resolve_version.pyin an isolated environment. - [EXTERNAL_DOWNLOADS]: The skill fetches necessary metadata from external sources to perform version resolution.
- Evidence: The script
scripts/cluster_resolve_version.pyusesurllib.request.urlopento fetch Dataproc release notes and Spark compatibility tables from official Google Cloud documentation atcloud.google.com.
Audit Metadata