Skills
skills/primatrix/skills/apply-resource/Gen Agent Trust Hub

apply-resource

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run with list-based arguments to interact with system tools like gcloud, kubectl, and xpk. This approach safely executes commands without being vulnerable to shell injection.
  • [DATA_EXPOSURE]: The skill contains a hardcoded Google Cloud Project ID (tpu-service-473302). This is used for configuration purposes and is not considered a sensitive credential.
  • [EXTERNAL_DOWNLOADS]: The documentation references official installation guides for required tools (Google Cloud SDK, kubectl, xpk) from trusted sources like Google Cloud and the AI-Hypercomputer GitHub organization, but does not perform any automated remote script execution or untrusted downloads.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 08:40 AM