google-cloud-auth-verification
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard
gcloud auth listandgcloud config listcommands. These are used to verify the local environment's authentication state and configuration, which is the primary and safe purpose of the skill. - [DATA_EXPOSURE]: The agent is instructed to read the output of authentication status checks. This reveals the user's active GCP account identity (email address) to the agent. While this exposes user identity information, it is handled within the local agent context and is required for cloud resource management.
- [SAFE]: The skill enforces a 'HARD STOP' policy if credentials are not found, specifically prohibiting the agent from attempting to install local packages or binaries as workarounds for authentication issues. This is a positive security practice that prevents unauthorized local environment modifications.
Audit Metadata