olares-files
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for interacting with the olares-cli tool. It does not contain executable code itself, but rather instructions for the agent on how to use the tool securely.\n- [SAFE]: Security best practices are emphasized throughout the documentation, such as the use of --password-stdin to avoid leaking credentials in shell history or process lists (references/olares-files-smb.md, references/olares-files-upload.md).\n- [SAFE]: The skill includes explicit path traversal protections by blacklisting '.' and '..' segments in remote paths, preventing unauthorized access outside the intended namespaces (references/olares-files-mkdir.md, references/olares-files-rename.md).\n- [SAFE]: The instructions mandate user confirmation for all destructive or high-impact actions, including file deletion, privilege changes (chown), and task cancellations (references/olares-files-rm.md, references/olares-files-chown.md, references/olares-files-task.md).\n- [SAFE]: External interactions are limited to the platform's own API and well-known cloud services (AWS S3, Google Drive, Dropbox), following established security patterns for multi-factor authorization and token management.
Audit Metadata