tencentcloud-cos
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is powered by the official
cos-python-sdk-v5library, and all network operations are directed to legitimate Tencent Cloud service endpoints (*.myqcloud.com). There are no attempts to execute remote code or download scripts from untrusted sources. - [SAFE]: Authentication is performed via standard environment variables (
TENCENTCLOUD_SECRET_IDandTENCENTCLOUD_SECRET_KEY), aligning with recommended practices for secure credential handling in automated environments. No hardcoded secrets or sensitive file access were identified. - [SAFE]: The included CLI script (
scripts/cos.py) implements safety features for high-risk actions, such as a--dry-runflag and a mandatory interactive confirmation prompt before executing batch deletions, which helps prevent accidental data loss.
Audit Metadata