bigquery-basics
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference guide for Google Cloud BigQuery operations. All external links and package dependencies target official Google Cloud domains (cloud.google.com, googleapis.dev) or trusted repositories (github.com/google).
- [EXTERNAL_DOWNLOADS]: The skill mentions installation of standard Google Cloud client libraries using package managers (pip, npm, go). These are verified official packages (@google-cloud/bigquery, google-cloud-bigquery, bigframes) used for legitimate cloud interactions.
- [COMMAND_EXECUTION]: The documentation includes standard usage examples for the
bqCLI andgcloudSDK. These commands are restricted to resource management (creating datasets/tables) and querying data within the user's Google Cloud project. - [DATA_EXFILTRATION]: No exfiltration patterns were found. Network operations are confined to official Google Cloud APIs for BigQuery management.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes tools for executing SQL (e.g., the
execute_sqlMCP tool), the documentation notes that these tools are restricted toSELECTstatements and include audit logging, providing a secure interface for data analysis.
Audit Metadata