mcloud-projects
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a command reference for the
mcloudCLI tool, providing examples for listing, retrieving, and deleting projects. The operations are within the scope of the definedallowed-tools. - [COMMAND_EXECUTION]: The skill documents the use of
mcloudsubcommands andjqfor project management. It follows safety best practices by explicitly flagging destructive operations (likeprojects delete) as irreversible and instructing the user to confirm IDs before execution. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing project metadata (such as names and handles) returned from the Cloud API. While this involves ingesting external data, the processing is handled via standard CLI tools (
jq), and the skill does not contain instructions that would cause the agent to execute untrusted content as code.
Audit Metadata