safe-gcloud-usage
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/safe-gcloud.shexecutes a platform-specific binary (e.g.,safe-gcloud-linux-amd64) located in thebin/directory relative to the script's path. - [COMMAND_EXECUTION]: The wrapper script forwards all command-line arguments and flags to the underlying binary using the
exec "$@"pattern, which is standard for wrapper utilities. - [COMMAND_EXECUTION]: The skill instructions define a security protocol where
gcloudoperations are restricted to an allowlist defined in.claude/gcloud-allowlist.json, which is a defensive measure to prevent unauthorized cloud operations.
Audit Metadata