vefaas

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the official CLI tool from a vendor-hosted URL: https://vefaas-cli.tos-cn-beijing.volces.com/volcengine-vefaas-latest.tgz. This is part of the standard setup for using the service.
  • [COMMAND_EXECUTION]: The skill uses the vefaas CLI tool to perform operations such as deploying applications, listing gateways, and inspecting project frameworks. Command substitution is used to automate parameter passing (e.g., $(vefaas run listgateways --first)).
  • [PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection by processing external or user-provided project data during framework detection. Ingestion points: Local project configuration files (package.json, requirements.txt, .env) and remote function code retrieved via vefaas pull. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided in the deployment workflows. Capability inventory: The skill utilizes the Bash tool to execute vefaas deploy (which involves code upload and remote deployment) and vefaas env set (which handles data persistence). Sanitization: No explicit sanitization or validation of the project metadata or code content is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 03:01 PM
Security Audit — agent-trust-hub — vefaas