·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 17.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open |
1 finding
This skill provides instructions for managing machine learning models in the Agent Platform Model Registry. It covers listing models, describing model details, uploading new models or versions, updating metadata, and deleting models.
Before executing any commands on behalf of the user, you MUST adhere to the following safety tiers based on the action requested:
list, describe, get)
upload, update)
--region=us-central1, --project=...,
--display-name="...") — natural-language paraphrases are NOT
sufficient.upload or update in Turn 1 without prior confirmation is strictly
prohibited.delete)
estimate_cost tool for Model Registry actions, as
estimate_cost is designed for serving infrastructure (endpoints/batch
prediction) and will return an error if called for registry operations. If
including cost in the preview card, state that Model Registry operations
incur no serving compute charges ($0.00 compute charges; standard Cloud
Storage pricing applies to model artifacts).CRITICAL: Before running any commands, verify that all necessary parameters are known:
gcloud config get project or gcloud config get compute/region). If still unresolved or ambiguous, pause and
explicitly ask the user for the missing parameter before executing mutating
or resource-specific commands.<unique-suffix>, [suffix], or <timestamp>),
generate a short unique alphanumeric string or timestamp and substitute it
cleanly. Never pass unexpanded literal placeholder tokens to the API.--region=$LOCATION_ID and
--project=$PROJECT_ID explicitly on all gcloud ai models commands. Do
NOT use global.Use this command to discover existing models in the registry and retrieve their numeric IDs. No confirmation is required.
Always pass --limit. A project can hold thousands of models, and an unbounded
list pages through every one of them, which can take over a minute and return
hundreds of KB of output. Results come back most recently updated first, so
--limit=50 returns the newest models in a few seconds.
Keep --limit=50 when the user asks to list "all" models, and say the reply
shows the 50 most recently updated models. Do NOT page through the whole
registry (with gcloud or Model.list()) unless the user asks for a count or
the complete inventory; offer to look up a specific model by display name
instead.
If the user pushes back and asks for the complete inventory, drop --limit
and print one compact line per model with
--format="value(name.basename(),displayName)". Warn that this can take a
minute or more in a large project.
If the user asks how many models there are, count the IDs without printing
the list. There is no count API, so this still pages through every model
(about a minute per 1,500 models); tell the user it may take a while. Do not
run a --limit list first.
Do NOT use --filter or --sort-by to narrow the list. gcloud applies both
client-side after fetching every page, so they are as slow as an unbounded
list.
To find a model by display name (e.g. to confirm an upload or deletion), filter on the server with the Python SDK:
Retrieve the full metadata for a specific model or version. No confirmation is required.
To target a specific version:
Register a new model or a new version of an existing model. This is a long-running operation. Action requires an inline confirmation card before proceeding.
Update metadata fields like display name or description. Note that gcloud ai models does NOT have an update subcommand. Instead, model metadata updates
MUST be executed using the Vertex AI Python SDK
(google.cloud.aiplatform.Model).
Action requires an inline confirmation card containing the exact script before proceeding.
Permanently delete a Model and all its versions. Action requires explicit typed confirmation before proceeding.
Get started with chainctlchainctl skill install public/google/agent-platform-model-registry:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/google/skills/cloud/agent-platform-model-registry:latest
Apache-2.0
HARDENING.md
LICENSE
SKILL.md