cloud-function-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to generate code and execute gcloud commands, creating an attack surface where malicious user input could influence tool execution.
- Ingestion points: User requests triggered by keywords such as "cloud function generator" or queries regarding GCP best practices (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or guardrails to prevent the agent from obeying instructions that might be embedded in the user's data.
- Capability inventory: The skill is permitted to use
Read,Write,Edit, andBashscoped togcloudcommands (SKILL.md). - Sanitization: There are no documented procedures for validating or sanitizing external input before interpolation into tool arguments or generated files.
Audit Metadata