gcp-bigquery-data-agents-quickstart
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a comprehensive sequence of shell commands using official Google Cloud CLI tools (
gcloud,bq) to enable APIs, create datasets, and configure identity access management (IAM). - [EXTERNAL_DOWNLOADS]: The skill enables several official Google Cloud service APIs. These interactions target well-known, trusted GCP domains (
googleapis.com) and are necessary for the skill's intended purpose. - [COMMAND_EXECUTION]: Uses a localized Python one-liner to perform YAML-to-JSON conversion for a REST API call. The script correctly uses
yaml.safe_load()to prevent unsafe deserialization vulnerabilities. - [COMMAND_EXECUTION]: Instructions involve granting high-privilege IAM roles (e.g.,
roles/bigquery.admin,roles/geminidataanalytics.dataAgentAdmin). While these are powerful permissions, they are restricted to the user's own project and identity as part of the documented setup procedure.
Audit Metadata