agent-platform-deploy
>-
Install this skill
or
93/100
Security score
The agent-platform-deploy skill was audited on Aug 3, 2026 and we found 7 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 168
Command substitution pattern
SourceSKILL.md
| 166 | ```bash |
| 167 | curl -sS -o /dev/null -w "%{http_code}\n" \ |
| 168 | -H "Authorization: Bearer $(gcloud auth print-access-token)" \ |
| 169 | -H "Content-Type: application/json" \ |
| 170 | "https://${LOCATION_ID}-aiplatform.googleapis.com/v1/projects/${PROJECT_ID}/locations/${LOCATION_ID}/publishers/google/${MODEL_ID}:generateContent" \ |
low line 230
Command substitution pattern
SourceSKILL.md
| 228 | # user as a recommended model. |
| 229 | |
| 230 | PROJECT_ID=$(gcloud config get-value project) |
| 231 | LOCATION_ID="us-central1" # Recommended default region |
| 232 | MODEL_ID="<PUBLISHER>/<FAMILY>@<VERSION-ID>" # PLACEHOLDER — replace with the exact ID from `gcloud ai model-garden models list` |
low line 263
Command substitution pattern
SourceSKILL.md
| 261 | # Example script to deploy a model with custom weights from a GCS bucket |
| 262 | |
| 263 | PROJECT_ID=$(gcloud config get-value project) |
| 264 | LOCATION_ID="us-central1" |
| 265 | # Replace with the gs:// URI pointing to your custom weights |
low line 322
Command substitution pattern
SourceSKILL.md
| 320 | ```bash |
| 321 | #!/bin/bash |
| 322 | PROJECT_ID=$(gcloud config get-value project) |
| 323 | LOCATION_ID="us-central1" |
| 324 | ENDPOINT_ID="YOUR_ENDPOINT_ID" |
low line 328
Command substitution pattern
SourceSKILL.md
| 326 | |
| 327 | echo "Fetching dedicated Endpoint DNS..." |
| 328 | ENDPOINT_URL=$(gcloud ai endpoints describe $ENDPOINT_ID --project=$PROJECT_ID --region=$LOCATION_ID --format="value(dedicatedEndpointDns)") |
| 329 | |
| 330 | if [ -z "$ENDPOINT_URL" ]; then |
low line 337
Command substitution pattern
SourceSKILL.md
| 335 | echo "Sending prediction request to $ENDPOINT_URL..." |
| 336 | curl -X POST \ |
| 337 | -H "Authorization: Bearer $(gcloud auth print-access-token)" \ |
| 338 | -H "Content-Type: application/json" \ |
| 339 | "https://${ENDPOINT_URL}/v1beta1/projects/${PROJECT_ID}/locations/${LOCATION_ID}/endpoints/${ENDPOINT_ID}/chat/completions" \ |
low line 365
Command substitution pattern
SourceSKILL.md
| 363 | # Example script to undeploy a model |
| 364 | |
| 365 | PROJECT_ID=$(gcloud config get-value project) |
| 366 | LOCATION_ID="us-central1" |
| 367 | # The model ID used during deployment (without the provider prefix sometimes, or exactly as listed in describe) |
Scanned on Aug 3, 2026
View Security Dashboard