The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses pip to install 'scoutsuite', which is a widely recognized and reputable multi-cloud security auditing tool maintained by the security community.- [COMMAND_EXECUTION]: The workflow incorporates multiple 'gcloud' and 'gsutil' commands to enable services, search assets, and audit IAM policies and storage permissions. These are standard administrative actions for managing and auditing GCP infrastructure.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external GCP environment configurations, including IAM policies, firewall rules, and bucket permissions, which are considered untrusted input sources.
Ingestion points: Data is fetched via GCP APIs in 'scripts/agent.py' and through 'gcloud' CLI calls.
Boundary markers: None identified in the provided scripts.
Capability inventory: The skill performs read-only auditing actions and prints findings to the console; it does not contain file-write capabilities, arbitrary network operations beyond official APIs, or execution paths for ingested data.
Sanitization: Not explicitly present, but the data is treated as structured information for reporting purposes.- [SAFE]: The skill's behavior is consistent with its stated purpose. It uses official SDKs, follows standard auditing procedures, and lacks any evidence of obfuscation or persistence mechanisms.

performing-gcp-security-assessment-with-forseti