gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure development practices for containerized workloads by specifying a non-privileged user (
USER node) in the Dockerfile and recommending distroless base images (gcr.io/distroless/nodejs20-debian12) to minimize the container attack surface.- [EXTERNAL_DOWNLOADS]: The deployment workflows utilize official Google Cloud SDK tools and container registries (gcr.io) for building and deploying services, which are established and well-known service resources.- [INDIRECT_PROMPT_INJECTION]: The provided code templates define entry points for processing external data from HTTP requests and CloudEvent triggers (Pub/Sub, Storage). While these constitute an ingestion surface for untrusted data, the code follows standard boilerplate patterns for serverless functions and does not include unsafe operations or sinks that would escalate the risk.
Audit Metadata