tencentcloud-cos

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is powered by the official cos-python-sdk-v5 library, and all network operations are directed to legitimate Tencent Cloud service endpoints (*.myqcloud.com). There are no attempts to execute remote code or download scripts from untrusted sources.
  • [SAFE]: Authentication is performed via standard environment variables (TENCENTCLOUD_SECRET_ID and TENCENTCLOUD_SECRET_KEY), aligning with recommended practices for secure credential handling in automated environments. No hardcoded secrets or sensitive file access were identified.
  • [SAFE]: The included CLI script (scripts/cos.py) implements safety features for high-risk actions, such as a --dry-run flag and a mandatory interactive confirmation prompt before executing batch deletions, which helps prevent accidental data loss.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 12:51 PM