cloud-logging-cross-project-configuration

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill does not contain any malicious code, obfuscation, or persistence mechanisms.
  • [COMMAND_EXECUTION]: The skill utilizes the gcloud CLI for cloud resource management. It implements a multi-tiered safety model that categorizes actions by risk level, explicitly requiring interactive user confirmation for billing and security-sensitive operations, such as modifying IAM policies via gcloud projects add-iam-policy-binding.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection. 1. Ingestion points: Untrusted log data read via gcloud logging read in SKILL.md. 2. Boundary markers: Mandatory safety tiers requiring human confirmation for sensitive mutations. 3. Capability inventory: IAM policy modification, resource deletion, and sink creation. 4. Sanitization: None present. The risk is minimized by the requirement for explicit user confirmation before any sensitive action is taken.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:41 AM
Security Audit — agent-trust-hub — cloud-logging-cross-project-configuration