gcp-cloud-run

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes official Google container images (e.g., gcr.io/cloud-builders/gcloud) for building and deploying services, which is a standard practice for GCP environments.
  • [COMMAND_EXECUTION]: The instructions include standard gcloud and npm/pip commands for resource deployment and dependency management, which are appropriate for the skill's intended purpose.
  • [PROMPT_INJECTION]: The skill defines patterns for ingesting external data from Google Cloud Pub/Sub and Cloud Storage events.
  • Ingestion points: External event data is accessed via cloudEvent.data.message and cloudEvent.data in SKILL.md.
  • Boundary markers: The provided example snippets do not include specific delimiters or instructions to ignore embedded commands within the processed data.
  • Capability inventory: The skill patterns involve database operations, Secret Manager access, and network requests via httpx or fetch.
  • Sanitization: The examples demonstrate basic parsing but do not include explicit sanitization of the event payloads, which is standard for high-level architectural guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:27 PM
Security Audit — agent-trust-hub — gcp-cloud-run