Skills/ClawHub/agent-bom-discover-gcp

agent-bom-discover-gcp@0.110.0

VERIFIED

Publisher claims: "Discover GCP-hosted AI agent and MCP-relevant assets from the operator's environment, emit canonical agent-bom inventory JSON, and scan it without giving agent-bom long-lived GCP credentials. Use when a user asks to inventory Vertex AI, Cloud Run, Cloud Functions, GKE, or agentic GCP infrastructure as canonical inventory." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher msaad00 · joined 1 days agoInstalls 4,762Last detonated 29 h ago
$npx skills add agent-bom-discover-gcp
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionSKILL.md:103 · File type combined with upload action — agent may exfiltrate local data files
AST07

No other findings across 164 lines in 2 files.