google-agents-cli-deploy@r1
CAUTIONPublisher claims: "This skill should be used when the user wants to "deploy an agent", "deploy my ADK agent", "set up CI/CD", "configure secrets", "troubleshoot a deployment", or needs guidance on Agent Runtime, Cloud Run, or GKE deployment targets, or binding an agent to an Agent Gateway. Covers deployment workflows, service accounts, rollback, and production infrastructure. Applies to any framework agents-cli deploys (ADK, LangChain, ...). Part of the agents-cli skills suite. Do NOT use for agent API code patterns (ADK: use google-agents-cli-adk-code), evaluation (use google-agents-cli-eval), or project scaffolding (use google-agents-cli-scaffold). " Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry skills.shPublisher google · joined 2 days agoInstalls 508KLast detonated 43 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Outbound HTTP to raw IP addressreferences/gke.md:70 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07CRITICAL
Credential pass-through configurationSKILL.md:267 · Credential pass-through configuration — agent relays sensitive credentials
AST02HIGH
Outbound HTTP to raw IP addressreferences/gke.md:73 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressreferences/testing-deployed-agents.md:70 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addressreferences/gke.md:73 · URL using raw IP address — may bypass domain-based filtering
AST07CRITICAL
Access to sensitive file pathsreferences/cmek.md:94 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Outbound HTTP to raw IP addressreferences/gke.md:78 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressreferences/gke.md:88 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addressreferences/gke.md:70 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
File type combined with upload actionSKILL.md:202 · File type combined with upload action — agent may exfiltrate local data files
AST07CRITICAL
Access to sensitive file pathsreferences/cmek.md:96 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
URL using raw IP addressreferences/gke.md:78 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressreferences/testing-deployed-agents.md:70 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressreferences/gke.md:88 · URL using raw IP address — may bypass domain-based filtering
AST07