using-cloud-cli
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
scripts/bq-cost-check.shscript processes external data in the form of SQL queries to perform cost estimations. - Ingestion points: The script ingests a query string as its first positional argument (
$1), which is then processed by the cloud tools. - Boundary markers: The script does not utilize delimiters or specific instructions to prevent the agent from potentially misinterpreting or following commands embedded within the SQL query text.
- Capability inventory: The skill utilizes
Bashand thebqCLI tool, which allows for broad interaction with Google Cloud Platform services including resource querying and data extraction. - Sanitization: The script does not perform validation, filtering, or sanitization of the query input before passing it to the BigQuery engine.
Audit Metadata