catalyst-stratus

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for Zoho Catalyst Stratus object storage. All code examples and documentation follow standard practices for cloud storage SDKs and REST APIs.
  • [EXTERNAL_DOWNLOADS]: The documentation references standard vendor-owned libraries such as zcatalyst-sdk and the widely-used busboy package for Node.js multipart parsing. These are standard dependencies for the Catalyst platform.
  • [COMMAND_EXECUTION]: Provides a curl example for interacting with the Stratus REST API. The example uses official vendor domains (zohostratus.com) and appropriate placeholders for user-specific data.
  • [CREDENTIALS_UNSAFE]: Demonstrates how to pass authentication tokens in headers using safe placeholders like {oauth_token} or {token}. It does not contain any hardcoded secrets.
  • [DATA_EXPOSURE]: Explicitly mentions that administrative scope (scope: 'admin') is required for sensitive operations like generating signed URLs or listing objects, which is a standard security control for the platform.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The documentation focus is on local SDK usage and standard HTTP requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 07:15 AM
Security Audit — agent-trust-hub — catalyst-stratus