connecting-looker-to-bigquery
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands that interpolate user-provided parameters (e.g.,
{looker_gcp_project_id},{bigquery_gcp_project_id}). This introduces a potential command injection surface if the agent does not sanitize these inputs. - [COMMAND_EXECUTION]: The skill executes a local shell script at
./skills/onboarding-preflight-check/scripts/preflight_check.shduring the pre-flight check phase. - [COMMAND_EXECUTION]: The skill uses the
gcloudCLI to perform high-privilege operations, specifically modifying IAM policy bindings (gcloud projects add-iam-policy-binding) to grant roles such asroles/bigquery.dataViewerandroles/serviceusage.serviceUsageConsumer.
Audit Metadata