vefaas
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the official CLI tool from a vendor-hosted URL:
https://vefaas-cli.tos-cn-beijing.volces.com/volcengine-vefaas-latest.tgz. This is part of the standard setup for using the service. - [COMMAND_EXECUTION]: The skill uses the
vefaasCLI tool to perform operations such as deploying applications, listing gateways, and inspecting project frameworks. Command substitution is used to automate parameter passing (e.g.,$(vefaas run listgateways --first)). - [PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection by processing external or user-provided project data during framework detection. Ingestion points: Local project configuration files (
package.json,requirements.txt,.env) and remote function code retrieved viavefaas pull. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided in the deployment workflows. Capability inventory: The skill utilizes theBashtool to executevefaas deploy(which involves code upload and remote deployment) andvefaas env set(which handles data persistence). Sanitization: No explicit sanitization or validation of the project metadata or code content is mentioned.
Audit Metadata