workload-manager-basics
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the official Google Cloud Workload Manager library from the Python Package Index (PyPI). This is a standard dependency from a trusted organization and is necessary for the skill's functionality.
- [COMMAND_EXECUTION]: The skill provides commands for using the gcloud CLI to handle authentication, enable APIs, and manage IAM policy bindings. These are legitimate administrative tasks for managing a Google Cloud project.
- [INDIRECT_PROMPT_INJECTION]: The skill processes evaluation results and violation findings from the Workload Manager REST API. This creates a data ingestion surface, but the risk is mitigated as the source is a managed cloud provider API and the data is used for security observability.
- [CREDENTIALS_UNSAFE]: The skill adheres to security best practices by recommending the use of Application Default Credentials (ADC) and IAM roles rather than hardcoding sensitive credentials or secrets.
Audit Metadata