google-cloud-storage-fuse
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill generates
gcloud,kubectl, andgcsfusecommand templates to manage cloud infrastructure and file system mounts. These commands are essential for the skill's primary function and are documented transparently. - [EXTERNAL_DOWNLOADS]: The skill references technical documentation and configuration guidance from the official
googlecloudplatformGitHub repository and Google Cloud documentation domains. These resources originate from a trusted vendor. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for shell commands that interpolate user-supplied data, which represents a potential attack surface.
- Ingestion points: User-provided values for bucket names, project IDs, and locations in
SKILL.md,references/checkpoint-safety.md, andreferences/gke-training-deployment.md. - Boundary markers: Absent; the templates use direct shell interpolation without additional delimiters.
- Capability inventory: Infrastructure management and resource inspection via
gcloudandkubectlshell commands acrossSKILL.mdand all reference files. - Sanitization: Not present; the skill assumes valid cloud resource identifiers are provided by the user.
Audit Metadata