gcp-audit-logs
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and command templates for auditing GCP activity using official tools like
gcloud,gsutil, andbq. No malicious patterns such as remote code execution, obfuscation, or persistence were detected.- [COMMAND_EXECUTION]: Provides standard CLI commands for GCP resource management (e.g.,gcloud logging sinks create,gsutil mb). These are intended for infrastructure configuration and do not involve suspicious execution patterns or remote script piping.- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by processing external data from GCP logs. - Ingestion points: Data enters via
gcloud logging readand BigQuery SQL queries. - Boundary markers: No explicit markers or 'ignore embedded instructions' warnings are present in the provided templates.
- Capability inventory: Uses
gcloud,gsutil,bq, andterraformfor resource management. - Sanitization: No automated sanitization of log content is implemented as the skill is intended for manual audit review.- [METADATA_POISONING]: Metadata fields like author, version, and source are consistent with the skill content and point to a public community repository.
Audit Metadata