The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing official Google Cloud tools from trusted sources. For example, it includes commands to fetch the Cloud SDK from sdk.cloud.google.com, the Cloud Ops Agent from dl.google.com, and the AlloyDB Auth Proxy from storage.googleapis.com. These sources are well-known and owned by the platform provider.
[REMOTE_CODE_EXECUTION]: Several files document standard installation patterns that involve executing remote scripts, such as piping the Cloud SDK installer to bash or executing the Ops Agent repository script with sudo. As these scripts originate from official Google domains for the purpose of tool setup, they represent intended functionality and are documented neutrally.
[COMMAND_EXECUTION]: The skill contains thousands of example commands for gcloud, gsutil, bq, and kubectl. These are legitimate administrative commands for managing GCP infrastructure and follow security best practices, such as using service account impersonation and least-privilege role assignments.
[CREDENTIALS_UNSAFE]: While the skill frequently references the use of service account keys and API keys, it consistently uses placeholders (e.g., YOUR_API_KEY_HERE, sa-key.json, SECRET_PASSWORD) and emphasizes secure practices like using Secret Manager and Workload Identity to avoid hardcoding actual credentials.

gcp-expert