google-cloud-storage-basics

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the MCP Toolbox binary from an official Google-managed endpoint (https://storage.googleapis.com/mcp-toolbox-for-databases/VERSION/linux/amd64/toolbox). This is documented as a trusted source for agent-based tool integration.
  • [EXTERNAL_DOWNLOADS]: Instructions for installing Cloud Storage FUSE include fetching a GPG key from a well-known Google package repository (https://packages.cloud.google.com/apt/doc/apt-key.gpg) to verify package integrity.
  • [COMMAND_EXECUTION]: The skill facilitates the management of cloud infrastructure through standard gcloud storage, gsutil, and curl commands. These operations are essential to the skill's primary purpose and include appropriate warnings for destructive actions such as bucket deletion.
  • [PRIVILEGE_ESCALATION]: The guide includes standard sudo commands for system-level tasks such as installing the GCSFuse adapter via the apt package manager and configuring mount points on Linux environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes an injection surface as it is designed to read data from external storage objects that could contain natural language instructions. However, the skill provides clear boundary markers by instructing the agent to request explicit user confirmation before executing any destructive or overwriting operations (e.g., delete_bucket, write_text).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:41 AM
Security Audit — agent-trust-hub — google-cloud-storage-basics