gcloud-vm
gcloud-vm is a Cloud platforms skill for AI agents, published by nubjs in the nub repository on GitHub. Skillspace rates gcloud-vm F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.
Unsafe. This skill has patterns associated with malicious or dangerous behaviour. We do not recommend running it.
Provision, start, reach, and use Google Cloud VMs for nub — for any real-OS work the local macOS host and Docker can't do (real Linux-kernel enforcement, real Windows/AppContainer/MSVC, a clean multi-GB build box). Invoke whenever you think "I need a Linux box" or "I need a Windows box" — you can START the existing `nub-linux`/`nub-win` instances OR CREATE a fresh one on demand with `gcloud compute instances create`. Encodes the load-bearing gotchas: IPs change on every restart (never trust a hardcoded one), SSH user is `nub` with key `~/.ssh/nub-vm`, a RUNNING box can be a wedged box (read the serial console), size any nub-building Linux box at ≥16 GB, and prefer cross-compiling on the Mac + scp'ing the artifact over building on the VM. AUTH IS NOT A BLOCKER — `gcloud` USER auth expires constantly (org session-control revokes the refresh token), but a durable SERVICE-ACCOUNT KEY makes every VM op work non-interactively: prefix any command with…
- Grade
- F
- Quality
- 15 / 100
- Safety
- Unsafe
- GitHub stars
- 4,285
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 91 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- Critical-risk patterns
- License
- Not declared. Check the repository before reusing it.
What the scanner flagged
- destructive rm -rf on home/root
- accesses sensitive system files
- mentions secrets in text
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.