gcp-spark
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill is designed as a developer assistant for Google Cloud Platform (GCP) Spark workloads.
- [EXTERNAL_DOWNLOADS]: The skill references and installs official libraries and connectors from trusted sources:
- Fetches
google-cloud-spark-connectfrom PyPI (official Google package). - Downloads Spark connectors (e.g., Spanner, BigQuery) from official Google Cloud Storage repositories (
gs://spark-lib/). - References standard open-source dependencies (e.g., Apache Iceberg, PostgreSQL, XGBoost) from well-known registries.
- [COMMAND_EXECUTION]: Utilizes standard GCP CLI (
gcloud) and developer tools (python3,jupyter,uv) for task execution, environment setup, and code compilation. These operations are restricted to the skill's primary purpose of managing Dataproc resources and preparing Spark jobs. - [CREDENTIALS_UNSAFE]: Adheres to security best practices by explicitly prohibiting hardcoded credentials or tokens. It provides instructions and examples for using Google Cloud Secret Manager and environment variables for secure credential management.
Audit Metadata