cos-upload
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform a multipart/form-data POST request to the AceData Cloud platform API. This is a standard method for file uploads and is consistent with the skill's stated purpose. - [DATA_EXFILTRATION]: The skill transmits local files to
platform.acedata.cloud. This is a legitimate operation targeting the author's own infrastructure for CDN hosting and does not constitute unauthorized exfiltration. - [CREDENTIALS_UNSAFE]: The instructions correctly recommend using an environment variable (
ACEDATACLOUD_PLATFORM_TOKEN) for authentication, which is the standard best practice for managing secrets in agent environments.
Audit Metadata