skills/samaeldemiurgos2-cyber/google-skills/cloud-logging-cross-project-configuration/Gen Agent Trust Hub
cloud-logging-cross-project-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill does not contain any malicious code, obfuscation, or persistence mechanisms.
- [COMMAND_EXECUTION]: The skill utilizes the
gcloudCLI for cloud resource management. It implements a multi-tiered safety model that categorizes actions by risk level, explicitly requiring interactive user confirmation for billing and security-sensitive operations, such as modifying IAM policies viagcloud projects add-iam-policy-binding. - [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection. 1. Ingestion points: Untrusted log data read via
gcloud logging readin SKILL.md. 2. Boundary markers: Mandatory safety tiers requiring human confirmation for sensitive mutations. 3. Capability inventory: IAM policy modification, resource deletion, and sink creation. 4. Sanitization: None present. The risk is minimized by the requirement for explicit user confirmation before any sensitive action is taken.
Audit Metadata