skills/samaeldemiurgos2-cyber/google-skills/agent-platform-rag-engine-management/Gen Agent Trust Hub
agent-platform-rag-engine-management
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute shell commands for environment setup and authentication.
- Includes
gcloud auth loginandgcloud auth application-default loginfor Cloud authentication. - Recommends the creation of a virtual environment using
python3 -m venvand its activation. - [EXTERNAL_DOWNLOADS]: The instructions include the installation of external Python libraries using the package manager.
- Fetches official libraries from the Google Cloud ecosystem:
google-cloud-aiplatformandgoogle-genaiviapip install. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it is designed to ingest and process data from external RAG corpora.
- Ingestion points: Data is retrieved from RAG corpora using
rag.retrieval_queryinSKILL.md. - Boundary markers: The provided Python snippets for grounded generation in Section 4 do not include specific delimiters or "ignore instructions" warnings for the retrieved content.
- Capability inventory: The skill uses the
google-genaiSDK to make network calls to Vertex AI for content generation and retrieval. - Sanitization: There is no explicit sanitization or filtering logic shown for the context text retrieved from the corpus before it is used for grounded generation.
Audit Metadata