google-cloud-storage-basics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to read and manage Google Cloud Storage objects and buckets via CLI, API, or MCP tools, potentially processing untrusted object content if external storage inputs are read.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction mentions installing an external skill via npx skills add gemini-cli-extensions/google-cloud-storage, which constitutes an unverifiable runtime external dependency from an unofficial GitHub source (gemini-cli-extensions/google-cloud-storage).