google-agents-cli-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various command-line tools including
agents-cli,gcloud,terraform, andkubectlto perform deployment and infrastructure management tasks. These operations are core to the skill's purpose and include safeguards such as requiring explicit human approval for deployments.\n- [EXTERNAL_DOWNLOADS]: Fetches deployment guidelines and documentation fromadk.dev. It also references official samples from thegoogle/adk-samplesGitHub repository. These sources are well-known and directly related to the supported development kit.\n- [INDIRECT_PROMPT_INJECTION]: The implementation guide for BigQuery batch inference inreferences/batch-inference.mdintroduces a potential injection surface.\n - Ingestion points: The
trigger_bqendpoint processes data directly from BigQuery table rows passed via thecallsparameter.\n - Boundary markers: The reference code does not demonstrate the use of delimiters or instructions to compartmentalize ingested data from the agent's core instructions.\n
- Capability inventory: The skill has the capability to run agents and trigger deployments, though deployment requires separate authorization.\n
- Sanitization: Input strings are serialized to JSON but lack specific sanitization or safety filtering to prevent malicious instructions embedded in BigQuery rows from affecting agent behavior.
Audit Metadata