gcp-cloud-run
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard instructions for interacting with Google Cloud Platform (GCP) services using the official
gcloudCLI tool. - [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
- [SAFE]: The skill promotes security best practices, such as referencing secrets via Google Cloud Secret Manager (e.g.,
DATABASE_URL=db-url:latest) rather than hardcoding sensitive values directly in environment variables. - [SAFE]: The provided Dockerfile uses official base images (
node:20-slim) and follows standard multi-stage build practices to minimize image size and attack surface. - [SAFE]: The skill includes instructions for safe deployment strategies, such as canary rollouts and traffic splitting, which enhance operational safety.
Audit Metadata