cos-upload
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
curlcommand to perform multipart form-data uploads to the vendor's API. This is the primary functional mechanism for transferring local files to the cloud. - [DATA_EXPOSURE]: The skill is designed to transfer local files to a public cloud storage endpoint (
platform.acedata.cloud). The documentation provides clear guidance that resulting URLs are publicly accessible and warns against uploading sensitive data. - [SAFE]: All network operations are directed to the author's legitimate infrastructure (
acedata.cloud). The skill follows standard security practices by using environment variables for authentication and provides specific guidance on when to use bundled uploaders to avoid direct token handling.
Audit Metadata