catalyst-stratus
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Zoho Catalyst Stratus object storage. All code examples and documentation follow standard practices for cloud storage SDKs and REST APIs.
- [EXTERNAL_DOWNLOADS]: The documentation references standard vendor-owned libraries such as
zcatalyst-sdkand the widely-usedbusboypackage for Node.js multipart parsing. These are standard dependencies for the Catalyst platform. - [COMMAND_EXECUTION]: Provides a
curlexample for interacting with the Stratus REST API. The example uses official vendor domains (zohostratus.com) and appropriate placeholders for user-specific data. - [CREDENTIALS_UNSAFE]: Demonstrates how to pass authentication tokens in headers using safe placeholders like
{oauth_token}or{token}. It does not contain any hardcoded secrets. - [DATA_EXPOSURE]: Explicitly mentions that administrative scope (
scope: 'admin') is required for sensitive operations like generating signed URLs or listing objects, which is a standard security control for the platform. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The documentation focus is on local SDK usage and standard HTTP requests.
Audit Metadata