agent-platform-migrate-from-ai-studio
>-
Install this skill
or
78/100
Security score
The agent-platform-migrate-from-ai-studio skill was audited on Aug 3, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 259
Command substitution pattern
SourceSKILL.md
| 257 | |
| 258 | ```bash |
| 259 | export PROJECT_NUMBER=$(gcloud projects describe "$PROJECT_ID" --format="value(projectNumber)") |
| 260 | echo "Project number: $PROJECT_NUMBER" |
| 261 |
low line 267
Command substitution pattern
SourceSKILL.md
| 265 | |
| 266 | ```bash |
| 267 | export PROJECT_NUMBER=$(curl "http://metadata.google.internal/computeMetadata/v1/project/project-id" -H "Metadata-Flavor: Google") |
| 268 | echo "Project number: $PROJECT_NUMBER" |
| 269 | ``` |
medium line 93
Curl to non-GitHub URL
SourceSKILL.md
| 91 | |
| 92 | ```bash |
| 93 | bash <(curl -sSL https://storage.googleapis.com/cloud-samples-data/adc/setup_adc.sh) |
| 94 | ``` |
| 95 |
medium line 267
Curl to non-GitHub URL
SourceSKILL.md
| 265 | |
| 266 | ```bash |
| 267 | export PROJECT_NUMBER=$(curl "http://metadata.google.internal/computeMetadata/v1/project/project-id" -H "Metadata-Flavor: Google") |
| 268 | echo "Project number: $PROJECT_NUMBER" |
| 269 | ``` |
low line 276
Access to home directory dotfiles
SourceSKILL.md
| 274 | |
| 275 | ```bash |
| 276 | mkdir -p ~/.config/gcloud |
| 277 | gcloud iam service-accounts keys create ~/.config/gcloud/application_default_credentials.json --iam-account="${PROJECT_NUMBER}[email protected]" |
| 278 | ``` |
low line 277
Access to home directory dotfiles
SourceSKILL.md
| 275 | ```bash |
| 276 | mkdir -p ~/.config/gcloud |
| 277 | gcloud iam service-accounts keys create ~/.config/gcloud/application_default_credentials.json --iam-account="${PROJECT_NUMBER}[email protected]" |
| 278 | ``` |
| 279 |
medium line 289
Access to home directory dotfiles
SourceSKILL.md
| 287 | |
| 288 | 5. Edit the configuration file that's usually located at: |
| 289 | `~/.openclaw/openclaw.json`. Ensure you prefix the Gemini model with |
| 290 | `google-vertex/`. |
| 291 |
low line 304
Access to home directory dotfiles
SourceSKILL.md
| 302 | "GOOGLE_CLOUD_PROJECT": "PROJECT_ID", |
| 303 | "GOOGLE_CLOUD_LOCATION": "global", |
| 304 | "GOOGLE_APPLICATION_CREDENTIALS": "~/.config/gcloud/application_default_credentials.json" |
| 305 | } |
| 306 | }, |
low line 312
Access to home directory dotfiles
SourceSKILL.md
| 310 | "primary": "google-vertex/gemini-3-flash-preview" |
| 311 | }, |
| 312 | "workspace": "~/.openclaw/workspace", |
| 313 | "compaction": { |
| 314 | "mode": "safeguard" |
low line 323
Access to home directory dotfiles
SourceSKILL.md
| 321 | { |
| 322 | "id": "main", |
| 323 | "workspace": "~/.openclaw/workspace", |
| 324 | "model": "google-vertex/gemini-3-flash-preview" |
| 325 | } |
Scanned on Aug 3, 2026
View Security Dashboard