devops
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION] (LOW): The skill recommends installing the Google Cloud SDK using
curl https://sdk.cloud.google.com | bash. - Evidence: Found in the 'Google Cloud Deployment' section of
SKILL.md. - Risk Assessment: Piped shell scripts from the internet are generally high-risk (Category 4). However,
google.comis a Trusted External Source according to safety guidelines, which downgrades the severity to LOW. - [EXTERNAL_DOWNLOADS] (LOW): Recommends the global installation of the
wranglerpackage via npm. - Evidence:
npm install -g wranglerinSKILL.md. - Context: Wrangler is the official CLI for Cloudflare Workers.
Recommendations
- CRITICAL: Downloads and executes remote code from untrusted source(s): https://sdk.cloud.google.com - DO NOT USE
Audit Metadata