gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes official Google container images (e.g.,
gcr.io/cloud-builders/gcloud) for building and deploying services, which is a standard practice for GCP environments. - [COMMAND_EXECUTION]: The instructions include standard
gcloudandnpm/pipcommands for resource deployment and dependency management, which are appropriate for the skill's intended purpose. - [PROMPT_INJECTION]: The skill defines patterns for ingesting external data from Google Cloud Pub/Sub and Cloud Storage events.
- Ingestion points: External event data is accessed via
cloudEvent.data.messageandcloudEvent.datainSKILL.md. - Boundary markers: The provided example snippets do not include specific delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill patterns involve database operations, Secret Manager access, and network requests via
httpxorfetch. - Sanitization: The examples demonstrate basic parsing but do not include explicit sanitization of the event payloads, which is standard for high-level architectural guidelines.
Audit Metadata