skills/googlecloudplatform/google-cloud-storage-plugin/google-cloud-storage-diagnostic/Gen Agent Trust Hub
google-cloud-storage-diagnostic
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gcloudandcurlcommands to inspect GCS bucket metadata, IAM policies, and audit logs for diagnostic purposes. All commands are explicitly documented and restricted to the scope of troubleshooting GCS permissions. - [AUTONOMY_CONTROLS]: The skill contains a strong 'CRITICAL SAFETY MANDATE' against the auto-execution of remediation commands. It explicitly requires the agent to print proposed commands and wait for user 'Y/N' confirmation before any state-modifying actions are taken.
- [DATA_EXPOSURE]: No hardcoded credentials or access to sensitive local file paths (like
.sshor.aws/credentials) were found. The skill operates exclusively on cloud resource metadata provided by the user. - [ATTRIBUTION_PRACTICES]: The skill enforces a rule to tag every command with environment variables (
CLOUDSDK_METRICS_ENVIRONMENT) or User-Agent headers, ensuring that all actions taken by the skill are auditable and distinguishable from manual user activity.
Audit Metadata