google-cloud-storage-basics
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the MCP Toolbox binary from an official Google-managed endpoint (
https://storage.googleapis.com/mcp-toolbox-for-databases/VERSION/linux/amd64/toolbox). This is documented as a trusted source for agent-based tool integration. - [EXTERNAL_DOWNLOADS]: Instructions for installing Cloud Storage FUSE include fetching a GPG key from a well-known Google package repository (
https://packages.cloud.google.com/apt/doc/apt-key.gpg) to verify package integrity. - [COMMAND_EXECUTION]: The skill facilitates the management of cloud infrastructure through standard
gcloud storage,gsutil, andcurlcommands. These operations are essential to the skill's primary purpose and include appropriate warnings for destructive actions such as bucket deletion. - [PRIVILEGE_ESCALATION]: The guide includes standard
sudocommands for system-level tasks such as installing the GCSFuse adapter via theaptpackage manager and configuring mount points on Linux environments. - [INDIRECT_PROMPT_INJECTION]: The skill includes an injection surface as it is designed to read data from external storage objects that could contain natural language instructions. However, the skill provides clear boundary markers by instructing the agent to request explicit user confirmation before executing any destructive or overwriting operations (e.g.,
delete_bucket,write_text).
Audit Metadata