vpc-network-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and metadata are consistent with its stated purpose of assisting with Google Cloud Platform (GCP) VPC network configuration. No malicious patterns, obfuscation, or unauthorized data access techniques were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection because it processes user-provided requests to generate cloud configurations and execute commands.
- Ingestion points: User input triggers phrases like 'vpc network setup' or 'vpc setup' defined in SKILL.md.
- Boundary markers: None explicitly defined in the instructions to separate user input from agent instructions.
- Capability inventory: The skill utilizes
Read,Write,Edit, andBash(gcloud:*)tools as configured in the YAML frontmatter. - Sanitization: The skill instructions do not specify any validation or sanitization logic for user input, relying on the platform's default execution safety.
Audit Metadata