Security audit
Security checks for vulnerabilities and agentic risk
The skill openly documents Google Cloud Identity administration, but its short description understates high-impact device wipe/delete and SSO configuration powers.
Review this as an administrator-level Google Cloud Identity skill, not just a groups tool. Install only if you intend agents to help with device administration and SSO configuration, and require explicit human confirmation before wipe, delete, patch, or assignment changes.
The manifest description materially understates the skill's capabilities by claiming it manages only identity groups and memberships while the documentation exposes device lifecycle and wipe operations. This mismatch can mislead users or higher-level agents into invoking sensitive, destructive commands they did not expect, increasing the risk of accidental device deletion or wiping.
The skill metadata says it is for groups and memberships, but the body documents SSO profile and assignment management, which can directly alter authentication behavior and organizational access controls. Misdescribing identity and SSO administration as a narrower groups-only skill creates a dangerous trust mismatch that may cause operators to approve use without understanding access-impacting functionality.
The description omits additional capabilities such as user invitations and policy retrieval, which means the declared scope does not match the real operational surface. Even where operations are read-only or less destructive, this weakens transparency and can defeat policy-based allowlisting, review, or user consent based on the manifest text.
The documentation advertises destructive operations such as device delete, device wipe, and group delete without any explicit caution about irreversible impact or operational prerequisites. In an agent skill context, omission of warnings raises the chance that users or automated workflows trigger destructive actions without sufficient review or confirmation.
The skill lists commands that create, delete, or modify inbound SSO profiles and assignments without warning that these changes can disrupt authentication, lock out users, or weaken security posture. Because these functions affect identity federation and sign-in routing, silent exposure in a productivity-labeled skill makes the risk materially higher.
No suspicious patterns detected.
